On Fri, Jun 16, 2000 at 03:23:50PM +1000, Ben Donohue wrote:
> hi slugs,
>
> is the following a good way to think about the ipchains rules?
>
> define a new chain name.
> ipchains -N dmz-bad
>
> define the new chain route/direction of packets.
> ie. if going from ip - from interface - to ip - jumpto dmz-bad.
> ipchains -A input -s 1.2.3.4 -i eth0 -d 5.6.7.8 -j dmz-bad
I usually only choose one of the source address or interface
> define the rules for the ports in dmz-bad
> ipchains -A dmz-bad -p tcp --sport 80 --dport 80 -j ACCEPT
In the firewall setup file I put this just after I create the new
chain to make it easier to see what to modify
> does this make sense or is there a hole somewhere? disregarding the
> default rules of course.
This how I do things myself, so it can't be wrong ;)
I also define a fallback chain for each interface which can help.
Cheers,
Anand
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
