Article View: ch.comp.os.linux
Article #22765Re: Frage Firewall (ipfwadm)
From: Christof Buergi
Date: Mon, 26 Apr 1999 00:00
Date: Mon, 26 Apr 1999 00:00
22 lines
1573 bytes
1573 bytes
In article <37244BBD.7ECC4786@hotmail.com>,
Roger Caspar <casproge@hotmail.com> writes:
> ipfwadm -0 -a deny -o -W eth0 -D 0.0.0.0/0 11
> ipfwadm -I -a deny -o -W eth0 -S 0.0.0.0/0 11
Die beiden Zeilen sind unnoetig. Du hast ja bereits grundsaetzlich
alles gesperrt.
> ipfwadm -F -a accept -m -b -P tcp -S 192.168.0.0/24 -D 0.0.0.0/0 80
^^
Auf den kannst du auch verzichten. Masquerading ist sowieso immer
bidirektional.
> Er gibt jedoch nur zur�ck invalid port/services!!
Hmmm... welche Kernelversion?
--
Christof Buergi | cbuergi@buergi.lugs.ch
| http://tristan.discordia.ch/
----------------------------------------------------------------------------
"We're like gerbils. We're in a cage running around and around."
Technical Details
Message-ID:
<FAtB8B.108@buergi.lugs.ch>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<37244BBD.7ECC4786@hotmail.com>Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII X-Google-Thread: f4b73,d6a8606d7c58b7c6 X-Google-Attributes: gidf4b73,public From: cb@christof.buergi (Christof Buergi) Subject: Re: Frage Firewall (ipfwadm) Date: 1999/04/26 Message-ID: <FAtB8B.108@buergi.lugs.ch> X-Deja-AN: 471326144 X-Nntp-Posting-Host: localhost Content-Transfer-Encoding: 8bit References: <37244BBD.7ECC4786@hotmail.com> Content-Type: text/plain; charset=iso-8859-1 X-Complaints-To: newsmaster@access.ch X-Trace: pacifica.access.ch 925187357 7115 195.112.93.225 (27 Apr 1999 04:29:17 GMT) Organization: Christof Buergi Winterthur CH Mime-Version: 1.0 Reply-To: cbuergi@access.ch NNTP-Posting-Date: 27 Apr 1999 04:29:17 GMT Newsgroups: ch.comp.os.linux