Re: [Leaf-user] Re: echoWall 1.32 [was: IPchains / Forwarding question]

2001-11-04 Thread Ray Olszewski
At 08:16 PM 11/4/01 -0500, Kory Krofft wrote: >Tom, >No. I am testing from inside. I assume it would route out and back in ok. This is always a bad assumption to make when testing firewalls. Maybe yes, maybe no ... but you can never *count* on out-and-in working the same as a true connection fro

Re: [Leaf-user] Re: echoWall 1.32 [was: IPchains / Forwarding question]

2001-11-04 Thread Tom Eastep
On Sunday 04 November 2001 05:47 pm, Kory Krofft wrote: > Tom, > > That maakes sense but how do I open that UDP port? I started this > thread because > I did not understand the syntax of the ipchains rules. The only down > side I have found to LRP is no man pages. I tried the HOW-TOs but > they as

Re: [Leaf-user] Re: echoWall 1.32 [was: IPchains / Forwarding question]

2001-11-04 Thread Kory Krofft
Tom, That maakes sense but how do I open that UDP port? I started this thread because I did not understand the syntax of the ipchains rules. The only down side I have found to LRP is no man pages. I tried the HOW-TOs but they assume a higher level of Linux knowledge than I have. Scott Best's echo

Re: [Leaf-user] Re: echoWall 1.32 [was: IPchains / Forwarding question]

2001-11-04 Thread Tom Eastep
On Sunday 04 November 2001 05:16 pm, Kory Krofft wrote: > Tom, > No. I am testing from inside. I assume it would route out and back in > ok. The problem isn't with packets sent from your local client to the server but rather with packets going in the opposite direction. The source address on t

Re: [Leaf-user] Re: echoWall 1.32 [was: IPchains / Forwarding question]

2001-11-04 Thread Kory Krofft
Tom, No. I am testing from inside. I assume it would route out and back in ok. I just had a friend try from outside and it doesn't work either. My message loge from the firewall shows his IP address as being denied. Nov 4 19:07:07 markii kernel: Packet log: input DENY eth0 PROTO=17 64.109.106.

[Leaf-user] Re: echoWall 1.32 [was: IPchains / Forwarding question]

2001-11-04 Thread Kory Krofft
Scott, Thanks for jumping in on this. I went back and started over with a fresh install of the new version. I thought the safest way for me was to have two lrpboot disks. One pure Dachstein and one for echowall. When I was working with it yesterday, I had not done the ./echowall install to make it