Jarrod MacFarlane wrote:
>
> Hi sluggers,
>
> Quick question .. is it at all possible to use IP chains to provide access
> to IRC/WEB/FTP/Everything (as I have working) but then block it for specific
> ports like Napster, or an entire domain?
Yes.
Get phpfwgen: http://phpfwgen.sourceforge.net/
Put in the following rules in this order:
Source ALL
Dest ALL
Proto ALL
Service The thing you want to block
Action DENY
Log your choice
Dir IN/FWD
... repeat for everything you want to block, then aadd:
Source ALL
Dest ALL
Proto ALL
Service ALL
Action ACCEPT
Log NO
Dir IN/FWD
It's the order of the rules that's important.
----+------------------------+--------------------------
Del | mailto:[EMAIL PROTECTED] | Christchurch, New Zealand
----+------------------------+--------------------------
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
