On 04/02/2016 03:41 PM, Wouter Deurholt wrote:
> Greetings,
> 
> I have a rule in 'iptables' format that I need to put in my rules file
> of my shorewall firewall.
> It is for a service that is running on my firewall (machine) on the
> internal network only
> I have two ethernet ports: eno1 for the internet en eno2 for my internal
> network (to be clear: a two interface firewall).
> 
> The rule:
> 
> -A INPUT -i eno2 -p tcp --dport 8843 -j ACCEPT
> 
> I am not sure what is correct, because I do not fully understand the
> iptables rule, although it seems quit simple. Is that rule for incoming
> AND outgoing (situation 1) or only for incoming (situation 2)?
> 
> In other words is it situation 1:
> 
> ACCEPT loc     $FW     tcp     8843
> ACCEPT $FW   loc       tcp     8843
> 
> Or situation 2:
> 
> ACCEPT loc     $FW     tcp     8843
> 
> I THINK it is situation 2, but I am not sure. Could some firewall-god
> enlighten me?
> 

It is #2.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to