Minh Duong wrote:
> Hello I'm trying to setup tinyproxy and shorewall on a LEAF Bering
> firewall. What I'd like to do is block all HTTP connections to the
> internet on port 80 and 8080 and force users to use port 8888.
> 
> So in shorewall/rules I have
> 
> ACCEPT     loc     fw      tcp     8888
> DROP       loc     fw      tcp     80,8080
> 
> The ACCEPT works fine but the DROP does not seem to work.   If I
> don't specify a port in a web browser, I can still surf.  Any clues
> as to what I can try to figure it out?

The 'DROP' rule needs to be from loc->net, not loc->fw.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT 
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, & 
iPhoneDevCamp as they present alongside digital heavyweights like Barbarian 
Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com 
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to