Re: [Leaf-user] lrp format and filter config

2002-03-08 Thread Charles Steinkuehler 

  Probably, although you don't mention what you're trying to specify
source
  ports for.  If you need to make custom rules, that's what the
  ipchains.input, ipchains.output, and ipchains.forward files are for in
 /etc.

 I want local users to be able to ssh into external machines, and (being
 fairly pedantic about firewalls) I only want to specify port 22 for
external
 machines. If I edit those files, how do they relate to the config files
(No
 2 on the network config menu)

The files are sourced by /etc/ipfilter.conf, so you can use any variables or
procedures defined in /etc/network.conf, /etc/ipfilter.conf, or
/etc/init.d/network.  Look for IPCH_IN, IPCH_OUT, and IPCH_FWD in
/etc/ipfilter.conf to see exactly where they are sourced in relation to the
rest of the rules.  You can either add rules using the -A option (probably
what you want in your case), or the I option to add rules at the beginning
of the list (for things like silently denying something filling up your
logs).

Charles Steinkuehler
http://lrp.steinkuehler.net
http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Re: [Leaf-user] lrp format and filter config

2002-03-07 Thread Dave Anderson 

Thanks for the reply.


 Take a close look at your logs...sounds like you might be on a cable-mode
 (or other shared-network setup).  The denied packets are probably being
 generated by one of your 'neighbors', and are coming in your external
 interface, otherwise they wouldn't be getting logged...


I am on a shared network of windows machines. The denied packets come from
various machines, source and destination are both internal. If these
shouldn't be logged, then I need to have a very close look at the ipchains
generated.

  Also, if I want to specify source ports for incoming traffic, do I have
to
  hard code that in the filter file?

 Probably, although you don't mention what you're trying to specify source
 ports for.  If you need to make custom rules, that's what the
 ipchains.input, ipchains.output, and ipchains.forward files are for in
/etc.

I want local users to be able to ssh into external machines, and (being
fairly pedantic about firewalls) I only want to specify port 22 for external
machines. If I edit those files, how do they relate to the config files (No
2 on the network config menu)

 zcat /path/to/package.lrp | tar -x

Thanks, that worked fine.
  Finally, as a constructive suggestion, does anyone think it would be
 useful
  if all ipchains rules where built up in one place in the config, and it
 was
  all done in a more 'tabular' fashion, so that rules could be added
easily,
  and options such as logging for some of the defaults could be easily
  switched off.

 Probably, but it would take a lot of work.  Are you volunteering?

Unfortunately I don't think I've got the time at the moment. I might have in
a few months though.

Thanks for a great product by the way.

regards
Dave



___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user