Re: [Shorewall-users] Best Way to Block Most Incoming Traffic

2019-02-06 Thread Tom Eastep
On 2/6/19 12:50 PM, Brent Gordon wrote: > A better way to ask my initial question is: > What is the best way to block all incoming traffic, even to open ports, > while allowing traffic from a limited range of addresses access to a > single port? > > For example, say that I have port 22 open for ss

Re: [Shorewall-users] Best Way to Block Most Incoming Traffic

2019-02-06 Thread Brent Gordon
A better way to ask my initial question is: What is the best way to block all incoming traffic, even to open ports, while allowing traffic from a limited range of addresses access to a single port? For example, say that I have port 22 open for ssh access.  With the default rule, if 92.63.194.

Re: [Shorewall-users] Best Way to Block Most Incoming Traffic

2019-02-05 Thread Tom Eastep
On 2/5/19 1:29 PM, Brent Gordon wrote: > What is the best way to block most, but not all, incoming traffic?  > There are four blocks of addresses I want to allow through for remote > administration.  Other than traffic from those four blocks I want to > drop all other traffic. > > I am running Sho

[Shorewall-users] Best Way to Block Most Incoming Traffic

2019-02-05 Thread Brent Gordon
What is the best way to block most, but not all, incoming traffic?  There are four blocks of addresses I want to allow through for remote administration.  Other than traffic from those four blocks I want to drop all other traffic. I am running Shorewall version 5.0.4 on a Ubuntu 16.04.5 LTS sy

Re: [Shorewall-users] Best way to block

2014-08-19 Thread Emiliano Vazquez
El 19/08/14 a las 09:21, Roberto C. Sánchez escibió: > Emiliano, > > Have a look at this article: > http://shorewall.net/Shorewall_Squid_Usage.html > > You can just forcibly redirect all web traffic through squid. You can do this > transparently, or you can block ports 80 and 443 and require your

Re: [Shorewall-users] Best way to block

2014-08-19 Thread Roberto C . Sánchez
Emiliano, Have a look at this article: http://shorewall.net/Shorewall_Squid_Usage.html You can just forcibly redirect all web traffic through squid. You can do this transparently, or you can block ports 80 and 443 and require your users to explicitly specify the proxy in their configurations.

Re: [Shorewall-users] Best way to block

2014-08-19 Thread matt darfeuille
I would say the blrules file. -Matt On 19 Aug 2014 at 8:41, Emiliano Vazquez wrote: > Hi guys. > > I'm reading how is the best way to block some IPs on the network to get > http/https access. I will send all the traffic trough proxy and need to > block those users who eliminate the proxy sett

[Shorewall-users] Best way to block

2014-08-19 Thread Emiliano Vazquez
Hi guys. I'm reading how is the best way to block some IPs on the network to get http/https access. I will send all the traffic trough proxy and need to block those users who eliminate the proxy setting. In Shorewall Blacklist [1] says: "The use of this file is deprecated and beginning with Sh