Re: ipfwadm/ipchains

[underley@iko.zakopane.top.pl (Daniel Podlejski)]

Michael Laing napisal(a):
[...]
: It's not totally clear to me how to use ipfwadm to do this...
: 
: Also, I am considering moving to slink and kernel 2.1.125 and using
: ipchains instead. It looks simpler and I would like to learn just one
: tool, if possible.

Use ipfwadm-wrapper, not ipfwadm.

For example:

ipfwadm-wrapper -F -p deny

(set default police to deny)

ipfwadm-wrapper -F -a accept -P tcp -S 192.168.0.0/24 -D 195.117.237.131 80

(allow to connection from your local network (192.168.0.0/24 - it's
example) to WWW server at 195.117.237.131)

-- 
Daniel Podlejski  underley@zakopane.top.pl
http://underley.zakopane.top.pl/
   ... I, hate the rain and sunny weather,
   and I, hate the beach and moutains too ...