192.168.100.108 is the local machine  - 192.168.100.* is outside.
I can telnet and ping outside - no problem. But I can't ssh to
192.168.100.102,
telnet on 192.168.100.108 doesn't work either and somehow printer jobs
aren't send until I disable the firewall

:-/

FW=/sbin/ipchains

case "$1" in

        start)

                # default policy
                ${FW} -P forward DENY
                ${FW} -P input DENY
                ${FW} -P output DENY


                # loopback
                ${FW} -A input -j ACCEPT -i lo
                ${FW} -A output -j ACCEPT -i lo

 
                ${FW} -A output -j ACCEPT -i eth0 -p tcp -s 192.168.100.108
                ${FW} -A output -j ACCEPT -i eth0 -p udp -s 192.168.100.108



                ${FW} -A input -j ACCEPT -i eth0 -p tcp \
                        -d 192.168.100.108 1024: ! -y
                ${FW} -A input -j ACCEPT -i eth0 -p udp \
                        -d 192.168.100.108 1024:



                ${FW} -A input -j ACCEPT -i eth0 -p tcp -d 192.168.100.108 25



                ${FW} -A input -j ACCEPT -i eth0 -p icmp
                ${FW} -A output -j ACCEPT -i eth0 -p icmp

                # masquerade

                ${FW} -A forward -j MASQ -i ppp0 

        ;;

        stop)
                ${FW} -F
        ;;

esac

Reply via email to