firewall problem again

[Vasilis Vasaitis]

On Thu, Feb 18, 1999 at 05:05:00AM +0200, root at port11.ath8.ppp.hol.gr wrote:
> (Prwta apo olla, gia ton Othona : ma kai fysika exw energopoiimeno 
> to forwarding)
> 
> >   Kapoios ap' tous dio mas exei mperdeutei, opote dieukrinise mou kati: to
> > x.x.x.8 einai IP address kapoiou sigkekrimenou mixanimatos, 'i einai to
> > network address tou topikou diktiou? 
> 
> Den kanw lathos, exw netmask 255.255.255.252, dhl 4 IP numbers :
> 1 gia network (.156) 1 gia to Linux (.157) ena gia to mhxanima
> pou tha parei static IP (.158) kai ena gia broadcast (.159)

  OK, ekleise auto.

..[snip]..
> Loipon dieykrinizw, aythn thn stigmh exw :
> 
> --------
> ipfwadm -F -p accept    <------- kai ayto tha to eithela deny
> ipfwadm -O -p accept
> ipfwadm -I -p accept
> ipfwadm -F -f
> ipfwadm -O -f
> ipfwadm -I -f
> 
> ipfwadm -F -a m -S 192.168.0.0/255.255.255.0 -D 0.0.0.0/0
> 
> #ayto tha to aferesw an h policy ginei deny
> ipfwadm -F -a reject -S 0.0.0.0/0 -D 192.168.0.0/255.255.255.0 -o
> 
> ipfwadm -F -a accept -V my.linux.static.ip -W eth1 \ 
>         -S my.broadcast.ip/255.255.255.252 \
> 	-D 0.0.0.0/0
> 
> ipfwadm -F -a accept -V my.linux.static.ip -W eth1 \ 
>         -S 0.0.0.0/0 1024:65535 \ 
> 	-D my.broadcast.ip/255.255.255.252
> 
> -------------
..[snip]..

  Loipon, katarxin ekei pou vazeis my.broadcast.ip kanonika mpainei to
my.network.ip (ektos an pali ftaiei i ora pou graftike to minima). Apo
ekei kai pera opos eipa (peripou) pithanos na voithisei an sto ena apo to
dio rules to `-W eth1' antikatastathei me `-W ppp0'. An oxi paraitoumai,
den ksero ti mporei na ftaiei. Kata 95% pantos ftaine oi entoles pou
dineis esi kai oxi o kernel 'i to ipfwadm 'i isos i skoteini meria tis
dinamis.

> I.Ioannou <roryt at hol.gr>

Vasilis Vasaitis
vvas at hal.csd.auth.gr

--
====================================================================
Gia boithia (h na diagrafhte) e-mail sto majordomo at hellug.gr
Ta archives tis listas einai sto http://lists.hellug.gr
prin steilete kapoia erothsh psakte mipos exei hdh apanththei.
Gia opoiodipote problima stilte e-mail ston owner-linux-greek-users
====================================================================