Re: [leaf-user] Re: shorewall

C. Dummy Wed, 27 Nov 2002 19:40:27 -0800

Last question tonight. I'm trying to add printer package p9100.lrp from
http://pigtail.net/LRP/printsrv/ this package works no problem on Dachstein. Needs some editing network.conf
line:

#$IPCH -A input -j ACCEPT -p tcp -s 0/0 -d $EX_IP 1024:65535 -i $EXTERN_IF

has to be commented out a nd 2 new line s added below

$IPCH -A input -j ACCEPT -p tcp -s 0/0 -d $EX_IP 1024:9099 -i $EXTERN_IF
$IPCH -A input -j ACCEPT -p tcp -s 0/0 -d $EX_IP 9103:65535 -i $EXTERN_IF
Should this go to policy or rules?
This should: close printer ports 9100,9101, and 9102 on external interface.
What rule that would be?
Andrey

Tom Eastep wrote:

--On Wednesday, November 27, 2002 10:15 PM -0500 "C. Dummy" <[EMAIL PROTECTED]> wrote:

 That's what I thought . So DNAT replaces both rules in some way. So for
my son's Starcraft game. In Dachstein: ipmasqadm autofw -A -r udp 6112
6112 -h 192.168.1.202 -v
ipmasqadm autofw -A -r tcp 6112 6112 -h 192.168.1.202 -v


in Shorewall
DNAT    net    loc:192.168.1.202  udp 6112
DNAT    net    loc:192.168.1.202   tcp 6112


That would be my guess -- no guarantees :-)

-Tom
--
Tom Eastep   \ Shorewall - iptables made easy
AIM: teastep  \ http://shorewall.sf.net
ICQ: #60745924 \ [EMAIL PROTECTED]


Tom Eastep wrote:

--On Wednesday, November 27, 2002 10:15 PM -0500 "C. Dummy" <[EMAIL PROTECTED]> wrote:

 That's what I thought . So DNAT replaces both rules in some way. So for
my son's Starcraft game. In Dachstein: ipmasqadm autofw -A -r udp 6112
6112 -h 192.168.1.202 -v
ipmasqadm autofw -A -r tcp 6112 6112 -h 192.168.1.202 -v

in Shorewall
DNAT    net    loc:192.168.1.202  udp 6112
DNAT    net    loc:192.168.1.202   tcp 6112


That would be my guess -- no guarantees :-)

-Tom
--
Tom Eastep   \ Shorewall - iptables made easy
AIM: teastep  \ http://shorewall.sf.net
ICQ: #60745924 \ [EMAIL PROTECTED]

-------------------------------------------------------
This SF.net email is sponsored by: Get the new Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0002en
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] Re: shorewall

Reply via email to