-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


On 6/11/19 9:25 PM, Eric Teeter wrote:
> Guys:
> 
> I don't know how this can be changed, can someone help.
> 
> How can this be rewritten to shorewall:
> 
> IPTables (IPv4)
> 
> iptables -I INPUT 1 -p tcp -m tcp --dport 80 -j ACCEPT iptables -I
> INPUT 1 -p tcp -m tcp --dport 53 -j ACCEPT iptables -I INPUT 1 -p
> udp -m udp --dport 53 -j ACCEPT iptables -I INPUT 1 -p tcp -m tcp
> --dport 67 -j ACCEPT iptables -I INPUT 1 -p udp -m udp --dport 67
> -j ACCEPT iptables -I INPUT 1 -p tcp -m tcp --dport 4711 -i lo -j
> ACCEPT

/etc/shorewall/rules:

HTTP(ACCEPT)    all     $FW
DNS(ACCEPT)     all     $FW
ACCEPT          all     $FW     tcp     67
ACCEPT          all     $FW     udp     67
ACCEPT          $FW     $FW     tcp     4711

> 
> IP6Tables (IPv6)
> 
> ip6tables -I INPUT -p udp -m udp --sport 546:547 --dport 546:547 -j
> ACCEPT

ACCEPT          all     $FW     udp     546:547 546:547
> 

- -Tom

- -- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org

iQIzBAEBCgAdFiEEFNMNR63CLO6yqbL8luaz8kI6TRAFAl0CubQACgkQluaz8kI6
TRDvFw//VdYeYPCCo90O/y5z0Aeb0mpdg5A6cWFy4Np7QcwxeLLy3VGSNpR2zsZV
ufEbj3ZwRaJCgx3uwgvb5ygzK8Y7NO4A0J1Lsjn2uykx/BgMPs2qASjKh6uYdZde
UrQKwP2VZYRWHdcWecorvQm637d24AnTlcGmI//6wFC/OfeBUlVx9Tbyq5HPTQPm
onZapgI8lXvEZBI7/nmlJE22ZJf04qy7F2gcKh+t7MG5B6FtQFGrPPezYZ55rbxn
17v25pVGeyifjzdpcnwChZxmAQXIVemE8cglLysqM4HEgG+teSng1UHlqlejMsyn
QNc8aUNfFwJUvJD0vjDy4rOJtu2Ki/J7nhGYRlCqYE9O8X+NeBxNojoD3wmF/mb4
XQyDD7wpx4OuFmbGjgnmhNDxELxGQLYMXA7Ld+zH7kz+bD3q1UGEuDsee4AlU0GX
FNPuVRCaYUguCkcaiXy22DkHcV685RmLjPfidq54w7RHGRMiTOThmX0mrylToy4u
SNzIOUcwNoez5rjLde1Y+4KtyY5woL9r8cv3W4TijbCtJdKxsO040cg4FS4twu9q
ieUFTrlIjuYk4F+Jo442tsNjrzSYRKYueBy2FzK4y1Yf30nE2c/3vVs2yDn7kWE6
7e81zFCmMnipM7lv6uaB3VGcXSXZroehT4MmdoItSYnjrn9FQq4=
=2iUA
-----END PGP SIGNATURE-----


_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to