Re: firewall with ipfw and natd

Article View: be.comp.security

Article #1757

#1757

From: Ish
Date: Tue, 07 Aug 2001 10:53

22 lines
1967 bytes

> >     ipfw add allow tcp from any to any 25

> > Where in fact I would like to specify that only the local network can
> > send/get mail...
> > Supposing I could do it this way:

> >     ipfw add allow tcp from 192.x.x.0/24 to any 25

> You could try..
>         ipfw add allow tcp from "InternalLAN":255.255.255.0 to any 110,25
via rl0 setup

Does not work. :0(
I really need to specify FROM ANY....
... and even if I specify "from any", I still can't use "via rl0" in this
rule.

> Either way, you should consider to rewrite your ruleset, and using
variables
> instead of fixed numbers. here is an example.

Did so... But it was easier to explain the problem. :0)

Technical Details

Message-ID: <NMPb7.501$gX2.85240@afrodite.telenet-ops.be>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!ossa.telenet-ops.be!afrodite.telenet-ops.be.POSTED!not-for-mail

References: <GuNb7.123$gX2.27571@afrodite.telenet-ops.be> <khPb7.995$5R2.102860@news01.chello.no>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,27de0af21f29d3af
X-Google-Attributes: gidf922c,public
X-Google-Thread: 113446,27de0af21f29d3af
X-Google-Attributes: gid113446,public
X-Google-Thread: 10eb3b,27de0af21f29d3af
X-Google-Attributes: gid10eb3b,public
X-Google-ArrivalTime: 2001-08-07 03:53:37 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!ossa.telenet-ops.be!afrodite.telenet-ops.be.POSTED!not-for-mail
From: "Ish" <keeos@crosswinds_NOSPAM_.net>
Newsgroups: be.comp.security,comp.security.firewalls,comp.unix.bsd.freebsd.misc
References: <GuNb7.123$gX2.27571@afrodite.telenet-ops.be> <khPb7.995$5R2.102860@news01.chello.no>
Subject: Re: firewall with ipfw and natd
Lines: 24
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Message-ID: <NMPb7.501$gX2.85240@afrodite.telenet-ops.be>
Date: Tue, 07 Aug 2001 10:53:33 GMT
NNTP-Posting-Host: 213.224.41.72
X-Complaints-To: abuse@pandora.be
X-Trace: afrodite.telenet-ops.be 997181613 213.224.41.72 (Tue, 07 Aug 2001 12:53:33 MET DST)
NNTP-Posting-Date: Tue, 07 Aug 2001 12:53:33 MET DST
Organization: Telenet Internet

Reply to Parent Message