>-------- Оригинално писмо -------- >От: Duarte Fernandes Rocha d...@eurotux.com
>Относно: Re: [Shorewall-users] open port from script >До: shorewall-users@lists.sourceforge.net >Изпратено на: Петък, 2012, Октомври 19 13:10:09 EEST > > > > p, li { white-space: pre-wrap; } ; > > > > Hello, > > For this situation, i would prefer an aprroach involving a VPN (OpenVPN?) > > That way you would be sure that only that client would be able to access > your firewall, then you just configure which access should be given to the > VPN network, or you could even restrict by VPN IP Address given to the > client. > > Other way to implement what you said, would be to use something like no-ip > or dyndns on the client, creating an DNS entry like client.no-ip.com, and > periodically check if the IP address has changed, if so you reflect those on > the firewall. > > Note that you'll have to have to have a daemon on the client side to update > the IP address (http://sourceforge.net/apps/trac/ddclient/) > > Still, I think the first option is the best and more secure. > > regards > > -- > > Duarte Rocha > _____________________________________________________ > A)bort, R)etry, I)nfluence with large hammer. > Unfortunately OpenVPN is not an option. I have UDP traffic between 2 servers and internet at the client is very limited and low quality. Initially this was my idea... to use dns and check on server for update, but downside is that I have additional delay. On client side I can run script after ip change... Thank you for the advice :) ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_sfd2d_oct _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users