RE: ipchains firewalling

2000-12-20 Thread Uncle Meat
es Galpin [ HREF="/tpl/Message/424JAHDCU/Editor?ToRec=iTo=cgalpin@lighthouse-softwar > e.com">mailto:[EMAIL PROTECTED]] > > >Sent: Tuesday, December 19, 2000 8:01 PM > > >To: '[EMAIL PROTECTED]' > > >Subject: Re: ipchains firewalling > >

RE: ipchains firewalling

2000-12-20 Thread Mulcahy, Chris
Title: RE: ipchains firewalling Works, perfectly!  Thanks, Charles. I'm unsure how I managed to not get the list footer.  I'm fairly certain that I sent my message Plain Text, but received a bounce from someone complaining about HTML.  Maybe I forgot to set it plain text an

Re: ipchains firewalling

2000-12-20 Thread Barry L. Kline
> "Mulcahy, Chris" wrote: > > Greetings: > > I have successfully set up ipchains as a firewall for my newly > installed T1. It blocks all traffic coming in and masquerades > outbound traffic. That is working fine. > > Now, how do I forward incoming traffic on ports 25 and 110 to my > internal

Re: ipchains firewalling

2000-12-20 Thread Charles Galpin
IPMASQADM="/usr/sbin/ipmasqadm" LOCALIF="eth0" LOCALIP=`/sbin/ifconfig $LOCALIF | grep inet | cut -d : -f 2 | cut -d \ -f 1` INTERNALIP="192.168.2.2" $IPMASQADM portfw -a -P tcp -L $LOCALIP 25 -R $INTERNALIP 25 $IPMASQADM portfw -a -P udp -L $LOCALIP 25 -R $INTERNALIP 25 $IPMASQADM portfw -a -P

Re: ipchains firewalling

2000-12-19 Thread Larry Grover
You can do this with ipmasqadm, which you can get here: http://juanjox.kernelnotes.org/ __ Larry Grover, PhD Assoc Prof of Physiology Marshall Univ Sch of Med On Tue, 19 Dec 2000 08:40:54 -0600, "Mulcahy, Chris" <[EMAIL PROTECTED]> wrote: > > This message is in MIME format. Since your mail re

ipchains firewalling

2000-12-19 Thread Mulcahy, Chris
Title: ipchains firewalling Greetings: I have successfully set up ipchains as a firewall for my newly installed T1.  It blocks all traffic coming in and masquerades outbound traffic.  That is working fine.  Now, how do I forward incoming traffic on ports 25 and 110 to my internal mail

Re: Portsentry vs ipchains firewalling

2000-01-31 Thread John D. Hardin
On Mon, 31 Jan 2000, Mike Lewis wrote: > Do I understand correctly, that the ipchains script from > (http://ipchains.nerdherd.org/) does exactly the same thing as > Portsentry does, except the ipchains script does the > redirection/denial "up front" where the Portsentry s/w does the > redirection

Re: Portsentry vs ipchains firewalling

2000-01-31 Thread Greg W
Portsentry has one main function, to detect portscans from portscanners...it will trigger some response when a pattern is matched. An ipchains script is a specific "filter" , it does not detect patterns as such, it can however log everything and deny everything if you have it set to do so. *

RE: Portsentry vs ipchains firewalling

2000-01-31 Thread Mike Lewis
Thanks Jasper, very good points ! -Original Message- From: Jasper Jans [mailto:[EMAIL PROTECTED]] Sent: Monday, January 31, 2000 12:53 AM To: [EMAIL PROTECTED] Subject: Re: Portsentry vs ipchains firewalling | Do I understand correctly, that the ipchains script from | (http

Re: Portsentry vs ipchains firewalling

2000-01-31 Thread Jasper Jans
- Original Message - From: "Mike Lewis" <[EMAIL PROTECTED]> Subject: Portsentry vs ipchains firewalling | Do I understand correctly, that the ipchains script from | (http://ipchains.nerdherd.org/) does exactly the same thing as Portsentry | does, except the ipchains

Portsentry vs ipchains firewalling

2000-01-31 Thread Mike Lewis
There's been a lot of talk of on the list lately about Portsentry (http://www.psionic.com/abacus/portsentry/). I've been using a modified firewall script (http://ipchains.nerdherd.org/) for sometime now. I decided based on all the traffic on the list about Portsentry to investigate it. Do I un