> >Question si je vais dans MCC et que je clique sur "avanc�" dans
> >"s�curit�/pafe feu" j'obtiens une boite de dialogue qui me dit : "vous
> >pouvez entrer divers ports. Exemples valides : 139/tcp 139/udp".
> >puis-je utiliser cette possibilit� pour configurer mon firewall, sachant
> >que le test chez http://www.pcflank.com/ me donne le r�sultat
> >ci-dessous. Et si oui, comment dois-je �crire l'info : 21/tcp? ou
> >21/udp? ou 21/tcp 21/udp? faut-il s�parer les ports par des virgules :
> >21/tcp, 23/tcp, etc?
Normalement tu n'y pas � utiliser les port 139 (partage r�seau samba)
Le plus simple, pour configurer ton firewall, pour une connection interne est
d'�diter le fichier policy de la mani�re suivante :
Dans une fen�tre xterm :
tape su root
entre ton password root
puis kwrite /etc/shorewall/policy
le texte qui appara�t doit avoir les lignes suivantes :
#
# Shorewall 1.3 -- Policy File
#
# /etc/shorewall/policy
#
# This file determines what to do with a new connection request if we
# don't get a match from the /etc/shorewall/rules file or from the
# /etc/shorewall/common[.def] file. For each source/destination pair, the
# file is processed in order until a match is found ("all" will match
# any client or server).
#
# Columns are:
#
# SOURCE Source zone. Must be the name of a zone defined
# in /etc/shorewall/zones, $FW or "all".
#
# DEST Destination zone. Must be the name of a zone defined
# in /etc/shorewall/zones, $FW or "all"
#
# POLICY Policy if no match from the rules file is found. Must
# be "ACCEPT", "DROP", "REJECT" or "CONTINUE"
#
# LOG LEVEL If supplied, each connection handled under the default
# POLICY is logged at that level. If not supplied, no
# log message is generated. See syslog.conf(5) for a
# description of log levels.
#
# If you don't want to log but need to specify the
# following column, place "_" here.
#
# LIMIT:BURST If passed, specifies the maximum TCP connection rate
# and the size of an acceptable burst. If not specified,
# TCP connections are not limited.
#
# As shipped, the default policies are:
#
# a) All connections from the local network to the internet are allowed
# b) All connections from the internet are ignored but logged at syslog
# level KERNEL.INFO.
# d) All other connection requests are rejected and logged at level
# KERNEL.INFO.
###############################################################################
#SOURCE DEST POLICY LOG LEVEL LIMIT:BURST
masq net ACCEPT
loc net ACCEPT
fw net ACCEPT
net all DROP info
all all REJECT info
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE
Voil�, ton firewall devrait �tre activ� et ta connection internet active elle
aussi
--
Pierre Lo Cicero
Analyste programmeur
Chamoille
1933 Sembrancher
+4127 785 32 11
[EMAIL PROTECTED]
www.cryptos.ch
Vous souhaitez acquerir votre Pack ou des Services MandrakeSoft?
Rendez-vous sur "http://www.mandrakestore.com";
