Good Day,

I've had several break-in attempts and have decided to tighten the security
on my servers.

With this in mind, I've been playing around with the linuxconf firewall rules.

1. Under "Firewalling defaults" I checked off "Inputing Rules   [X]  are
active", which I suspect defaults to rejecting all requests?

2. Under "Blocking Firewalling" I setup a rule to allow any access (
0.0.0.0 ) from "all" protocols on "Any" interface on eth0.  This enabled
all access.

3. I want to restrict specific services such as telnet on their ports but
have not figured out how to do this successfully.  The method I've tried is
to (a) restrict all access to port 23, and then (b) allow access from a
host IP on port 23.  This does not seem to work.  I can restrict all access
on port 23 just fine but when I create an access rule for a host IP on port
23 it does not allow access...

To elaborate, I first created a blocking rule as follows:

Reject "Protocol tcp" From "Host 0.0.0.0" To "Host eth0" on "Other Ports 23"

This seemed to block access to port 23 just fine.

I then created another rule, hoping to allow access on port 23 to my
workstation:

Accept "Protocol tcp" From "Host 24.138.29.83" To "Host eth0" on "Other
ports 23"

But this did not allow access.

Any suggestions?

Cheers... Dino


-----
   Dino Nardini, BSc, Certified Web Master 
   mailto:[EMAIL PROTECTED]

   Explore Nova Scotia - "Canada's Ocean Playground"
   http://www.explorenovascotia.com


---
You are currently subscribed to linuxconf as: [[email protected]]
To unsubscribe, forward this message to [EMAIL PROTECTED]

Reply via email to