Am 03.10.2013 um 21:03 schrieb Fernando Fuentes <ffuen...@digitalvoipnet.com>:

> Lonnie,
> 
> That's exactly what I am trying to do. Give my self access to the gui.
> 
> Regards,

Ah OK, then add

GUI_FIREWALL_RULES="
1~PASS_EXT_LOCAL~TCP~0/0~443~~~~~~
"
HOST_OPEN_TCP="0/0~22 0/0~443"

into "/mnt/kd/rc.conf.d/gui.firewall.conf" followed by a 

"arno-iptables-firewall restart"

> 
> 
> On Thu, Oct 3, 2013 at 1:54 PM, Michael Keuter <li...@mksolutions.info> wrote:
> 
> Am 03.10.2013 um 20:43 schrieb Fernando Fuentes <ffuen...@digitalvoipnet.com>:
> 
> > Lonnie,
> >
> > Thanks. I dont have access to the gui and I need to add rules to the 
> > firewall.
> > I guess this will work.
> > How would I know which is the interface?
> > IE: EXT to INT
> >
> > Regards,
> 
> You can look into "/mnt/kd/rc.conf.d/gui.network.conf" to see AstLinux NIC 
> mappings.
> 
> > On Thu, Oct 3, 2013 at 1:23 PM, Lonnie Abelbeck <li...@lonnie.abelbeck.com> 
> > wrote:
> > Hi Fernando,
> >
> > I'm not completely sure what you are asking, is it... "I'd like to add 
> > persistent iptables rules that are outside the scope of the web interface 
> > Firewall tab"
> >
> > If so, edit the file "/mnt/kd/arno-iptables-firewall/custom-rules" (BTW 
> > symlinked to by "/etc/arno-iptables-firewall/custom-rules")
> >
> > For example...
> >
> > -------- /mnt/kd/arno-iptables-firewall/custom-rules --------
> > # Put any custom (iptables) rules here down below:
> > ##################################################
> >
> > echo "[CUSTOM RULE] Redirect 1st Interface TCP port 12345 to 443"
> > ip4tables -t nat -A POST_NAT_PREROUTING_CHAIN -i $INTIF -d $INTIP -p tcp 
> > --dport 12345 -j REDIRECT --to-port 443
> > --------
> >
> > Note: the "custom-rules" is interpreted as a shell script, additionally 
> > with the AIF shell environment.  As such, all AIF variables and AstLinux 
> > variables are available as well as AIF helper functions like ip4tables, 
> > ip6tables and iptables.
> >
> > I strongly advise using "echo" comments as above so you don't forget 
> > "custom-rules" are defined.
> >
> > Lonnie
> >
> >
> >
> > On Oct 3, 2013, at 10:54 AM, Fernando Fuentes wrote:
> >
> > > Team,
> > >
> > > I am trying to add a rule to my firewall via cli.
> > > I cant seem to find the iptables file.
> > >
> > > Can you point me to the right direction?
> > >
> > > Regards,
> > > ------------------------------------------------------------------------------
> > > October Webinars: Code for Performance
> > > Free Intel webinars can help you accelerate application performance.
> > > Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most 
> > > from
> > > the latest Intel processors and coprocessors. See abstracts and register >
> > > http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk_______________________________________________
> > > Astlinux-users mailing list
> > > Astlinux-users@lists.sourceforge.net
> > > https://lists.sourceforge.net/lists/listinfo/astlinux-users
> > >
> > > Donations to support AstLinux are graciously accepted via PayPal to 
> > > pay...@krisk.org.
> >
> >
> > ------------------------------------------------------------------------------
> > October Webinars: Code for Performance
> > Free Intel webinars can help you accelerate application performance.
> > Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most 
> > from
> > the latest Intel processors and coprocessors. See abstracts and register >
> > http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk
> > _______________________________________________
> > Astlinux-users mailing list
> > Astlinux-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/astlinux-users
> >
> > Donations to support AstLinux are graciously accepted via PayPal to 
> > pay...@krisk.org.
> >
> > ------------------------------------------------------------------------------
> > October Webinars: Code for Performance
> > Free Intel webinars can help you accelerate application performance.
> > Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most 
> > from
> > the latest Intel processors and coprocessors. See abstracts and register >
> > http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk_______________________________________________
> > Astlinux-users mailing list
> > Astlinux-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/astlinux-users
> >
> > Donations to support AstLinux are graciously accepted via PayPal to 
> > pay...@krisk.org.
> 
> 
> Michael
> 
> http://www.mksolutions.info
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------------
> October Webinars: Code for Performance
> Free Intel webinars can help you accelerate application performance.
> Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
> the latest Intel processors and coprocessors. See abstracts and register >
> http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk
> _______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.
> 
> ------------------------------------------------------------------------------
> October Webinars: Code for Performance
> Free Intel webinars can help you accelerate application performance.
> Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
> the latest Intel processors and coprocessors. See abstracts and register >
> http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk_______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to 
> pay...@krisk.org.


Michael

http://www.mksolutions.info




Attachment: smime.p7s
Description: S/MIME cryptographic signature

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to