[no subject]

Thanks for that clarification.

> 
> This is different than it was with the old "ipchains".
> 
> /sbin/iptables -A FORWARD -p tcp -i ${PRIVATE} -s 192.168.254.0/24 -d
>  0.0.0.0/0 --dport 25 -j DROP

Yep.  That is what I had to do.


> 
> 	Stephan
> 
> 
> > Here is one rule set:
> > /sbin/iptables -A INPUT -p tcp -i ${PRIVATE} -s 192.168.254.0/24 -d
> > 192.168.1.254/32 --dport 25 -j ALLOW
> > /sbin/iptables -A INPUT -p tcp -i ${PRIVATE} -s 192.168.254.0/24 -d
> > 0.0.0.0/0 --dport 25 -j DROP
> > 
> > 
> > Should'nt the exception be before the rule?
> > 
> > 
> > On Wed, 2004-08-04 at 14:45, Christopher Fowler wrote:
> > > I have a machine on the network that I need to protect my bandwidth
> > > from.  This is a windows box and it is clear to me that it can not be
> > > trusted.
> > >
> > > My firewall is 192.168.1.254 and I want it to be able to go to port 25
> > > of that machine but not out the public interface.  I also want to block
> > > all outgoing ports other than 80.
> > >
> > > 2 Trojans were found on this machine and I think it has become a spam
> > > box.
> > >
> 


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00126" href="msg00126.html">[ale] iptables rules</a></strong>
<ul><li><em>From:</em> ups at tree.com (Stephan Uphoff)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00126.html">[ale] iptables rules</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00128.html">[ale] OT: Murphy wins again</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00126.html">[ale] iptables rules</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00129.html">[ale] iptables rules</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00127"><strong>Date</strong></a></li>
<li><a href="threads.html#00127"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>