[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Setting up Masquerading on Debian machines.



At 01:47 PM 1/2/97 +0100, Michael Meskes wrote:
>No! I've set up a firewall with it and it works fine.
>
>> I set up the host (the one actually connected to the internet via ppp)
>> with the following network related commands (in addition to a ppp
>> defaultroute):
>> ...
>>   ipfwadm -F -p deny
>>   ipfwadm -F -a accept -m -S 192.168.1.0/24 -D 0.0.0.0/0 -W eth0

I've just set up a firewall yesterday - works great except for one bad
thing.  In the examples in the Firewall-HOWTO it says to do it by deny'ing
and then accept'ing.  I found that I was *still* firewalled by doing this -
however, when doing an accept first and then a deny second it worked fine.
Strange - but it works, ie:

ipfwadm -O -a acc -S 203.15.138.0/24 -D 203.22.233.0/24 -P tcp
ipfwadm -O -a rej -S 203.15.138.0/24 -D 0.0.0.0/0 80 -P tcp

seems to firewall web connections outside my network fine, but put them the
other way around it doesn't.

Regards,

...Karl

--
Karl Ferguson, 
Tower Networking Pty Limited                  karl@tower.net.au
t/a STAR Online Services                      karl@debian.org
Tel: +61-9-455-3446  Fax: +61-9-455-2776


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com


Reply to: