David Pitts wrote:
> 
> Just a bit more.
> 
> The connection is made from a client provided by the Tax Office.
> However, on their website they say that to use the software you must
> have a browser capable of 128 bit SSL installed, so its possible they're
> using the browser protocol (HTTP?) and port.

Just curious, David, what's the relationship of the client provided by
the Tax Office with the browser? Is it some sort of plug-in or is it a
standalone? Most of the major browsers of today support 128 bit, I'm
still using Netscape 4.8, which uses 128-bit, to reach my own bank....

> I don't even know for sure that the thing will work through a NATted
> firewall at all.

If you initiate the connection from your own side of the firewall surely
you must have it configured to accept reply packets. I use IE 5.5 and/or
Netscape 4.8 to do tax returns here in Stockholm, with either
Dachstein-ipchains or Slackware-Shorewall, no problems. It's only a
https connection. Maybe your client needs authentication via
certificates, popular with the banks.
 
> Does the lack of any relevant entries in my log (shorewall.log) mean
> that there is no relevant traffic being blocked?  I do have some
> shorewall.log entries showing rejected connections.  Should every
> rejected attempt to access any port be logged, unless there is a
> statement that specifically stops the logging?
> 
> What I need to know is whether the lack of logs means there is no
> blocking or I'm not logging the right thing.

It's difficult to say without seeing an excerpt from your logs.

Regards,
-- 
Patrick Benson
Stockholm, Sweden


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to