Hello fellow masq friends:
I have a network which is masqueraded using the following
commands. I would like a particular computer to be excluded
from being able to see the internet, but when I use this
command:
/sbin/ipfwadm -F -i reject -P all -S 192.168.240.5/24 -D 0.0.0.0/0
It keeps the entire network from seeing the internet, not just
the single computer. Any ideas what I am doing wrong?
Thanks for your time,
Barton
Here are the commands:
# By default, deny all services
/sbin/ipfwadm -F -p deny
# Flush all
/sbin/ipfwadm -F -f
/sbin/ipfwadm -I -f
/sbin/ipfwadm -O -f
# Add a masquerading entry for the internal sub-net
/sbin/ipfwadm -F -a m -S 192.168.240.0/24 -D 0.0.0.0/0
# Reject anything from this address
/sbin/ipfwadm -F -i reject -P all -S 192.168.241.5/24 -D 0.0.0.0/0
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]