[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[no subject]
- <!--x-content-type: text/plain -->
- <!--x-date: Wed Aug 4 15:20:04 2004 -->
- <!--x-from-r13: hcf ng gerr.pbz (Egrcuna Gcubss) -->
- <!--x-message-id: [email protected] -->
- <!--x-reference: [email protected] --> "http://www.w3.org/TR/html4/loose.dtd">
- <!--x-subject: [ale] iptables rules -->
- <li><em>date</em>: Wed Aug 4 15:20:04 2004</li>
- <li><em>from</em>: ups at tree.com (Stephan Uphoff)</li>
- <li><em>in-reply-to</em>: Your message of "Wed, 04 Aug 2004 14:55:01 EDT." <<a href="msg00125.html">[email protected]</a>> </li> The INPUT chain is for a packet with the box itself as a destination The OUTPUT chain is for locally generated packets The FORWARD chain is for routed packages. Routed packages will not go through the INPUT or OUTPUT chains.
- <li><em>subject</em>: [ale] iptables rules</li>
This is different than it was with the old "ipchains".
/sbin/iptables -A FORWARD -p tcp -i ${PRIVATE} -s 192.168.254.0/24 -d
0.0.0.0/0 --dport 25 -j DROP
Stephan
> Here is one rule set:
> /sbin/iptables -A INPUT -p tcp -i ${PRIVATE} -s 192.168.254.0/24 -d
> 192.168.1.254/32 --dport 25 -j ALLOW
> /sbin/iptables -A INPUT -p tcp -i ${PRIVATE} -s 192.168.254.0/24 -d
> 0.0.0.0/0 --dport 25 -j DROP
>
>
> Should'nt the exception be before the rule?
>
>
> On Wed, 2004-08-04 at 14:45, Christopher Fowler wrote:
> > I have a machine on the network that I need to protect my bandwidth
> > from. This is a windows box and it is clear to me that it can not be
> > trusted.
> >
> > My firewall is 192.168.1.254 and I want it to be able to go to port 25
> > of that machine but not out the public interface. I also want to block
> > all outgoing ports other than 80.
> >
> > 2 Trojans were found on this machine and I think it has become a spam
> > box.
> >
</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00127" href="msg00127.html">[ale] iptables rules</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Chris Fowler)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00125" href="msg00125.html">[ale] iptables rules</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00125.html">[ale] iptables rules</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00127.html">[ale] iptables rules</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00125.html">[ale] iptables rules</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00127.html">[ale] iptables rules</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00126"><strong>Date</strong></a></li>
<li><a href="threads.html#00126"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>
<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>