Re: Collection of sample high-quality iptables configurations?

2003-02-15 Thread Tzafrir Cohen
On Fri, 14 Feb 2003, Shlomi Fish wrote: > On Fri, 14 Feb 2003, Omer Zak wrote: > > > Hello Doron, > > Thanks for the link.It is a first step in the right direction. But it > > is still good only for someone who is willing to invest some time and > > study the subject. > > It is not yet an "out of

Re: Collection of sample high-quality iptables configurations?

2003-02-14 Thread Shlomi Fish
On Fri, 14 Feb 2003, Omer Zak wrote: > Hello Doron, > Thanks for the link.It is a first step in the right direction. But it > is still good only for someone who is willing to invest some time and > study the subject. > It is not yet an "out of the box" solution for someone with simple and > stand

Re: Collection of sample high-quality iptables configurations?

2003-02-14 Thread Boaz Rymland
Hi, Might I join the recommendation of the IPtables scripts at http://www.linuxguruz.org/iptables/ . If you're looking for "strong" configurations, then by judging from what I've found, there are some pretty complicated configuration there (sorry, dont have the exact link). Still, though, some

Re: Collection of sample high-quality iptables configurations?

2003-02-14 Thread Omer Zak
Hello Doron, Thanks for the link. It is a first step in the right direction. But it is still good only for someone who is willing to invest some time and study the subject. It is not yet an "out of the box" solution for someone with simple and standardized needs and wants just to get the job done

Re: Collection of sample high-quality iptables configurations?

2003-02-14 Thread Doron Ofek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 áéåí ùéùé 14 ôáøåàø 2003, 13:09, Omer Zak ëúá: > Once upon a time I configured a 2.2.x Linux firewall with ipchains, and > used a script with which I was happy, as it opened only certain ports, had > anti-spoofing protection, etc. > More recently I con

RE: Collection of sample high-quality iptables configurations?

2003-02-14 Thread linux_il
Here is something which should fit your needs (except maybe that I use a fixed IP address). Hope this helps. BTW - once you setup the configuration you can save/restore it in the boot scripts with iptables-save and iptables-restore. --Amos > -Original Message- > From: Omer Zak > Sent: