Re: Inherited ISP host configuration nightmare

2000-08-18 Thread cowboy
On Fri, 18 Aug 2000, Gene Grimm wrote: The easiest thing I can think of is ipportfw. Why not just forward the mail or http ports to the other machine. (probably the http in this case). Maybe setup a simple ip chain on the mail ports to keep track of how much data goes through them, or even logg

Re: Inherited ISP host configuration nightmare

2000-08-18 Thread cowboy
On Fri, 18 Aug 2000, Gene Grimm wrote: The easiest thing I can think of is ipportfw. Why not just forward the mail or http ports to the other machine. (probably the http in this case). Maybe setup a simple ip chain on the mail ports to keep track of how much data goes through them, or even log

Re: ipchains help

2000-12-13 Thread cowboy
On Thu, 14 Dec 2000, Minta Adrian wrote: /sbin/ipchains -A input -s !192.168.1.0/24 -d 0/0 110 -j DENY that above should work, although isn't perfect. A default policy of reject, or deny (for in, out, and forward) then selectively opening holes would be better. Also, do not forget tcpwrappers.