Re: Setting up a firewall with dynamic IPs

1999-07-20 Thread Joel Ray Holveck
> Usually if a connection succeeds the firewall isn't stopping it > at all. How is nmap figuring out the service type? I assume by > making a connection and probing it. Nothing so elegant. It uses /etc/services. Most of its scans never finish opening the connection. (This is why it will norma

Re: Setting up a firewall with dynamic IPs

1999-07-20 Thread Joel Ray Holveck
> Usually if a connection succeeds the firewall isn't stopping it > at all. How is nmap figuring out the service type? I assume by > making a connection and probing it. Nothing so elegant. It uses /etc/services. Most of its scans never finish opening the connection. (This is why it will norm

Re: Setting up a firewall with dynamic IPs

1999-07-18 Thread Jonathan M. Bresler
> On Tue, 13 Jul 1999, Stephen Hocking-Senior Programmer PGS Tensor Perth wrote: > > > I was checking out the firewall setup in /etc/rc.firewall, and noticed that > > the simple example relied on a fixed IP address for the external interface. > > I > > don't know ahead of time what IP address

Re: Setting up a firewall with dynamic IPs

1999-07-18 Thread Jonathan M. Bresler
> On Tue, 13 Jul 1999, Stephen Hocking-Senior Programmer PGS Tensor Perth wrote: > > > I was checking out the firewall setup in /etc/rc.firewall, and noticed that > > the simple example relied on a fixed IP address for the external interface. I > > don't know ahead of time what IP address is g

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Matthew Dillon
:Thanks for every one's help - I now have it working nicely. It's amazing what :you discover when RTFMing. Oddly enough, running nmap with the Christmas tree :scan (after I've allowed only smtp & ssh to be connected to) gives the :following - : :# ./nmap -v -v -sX foo : :Starting nmap V. 2.12 by

RE: Setting up a firewall with dynamic IPs

1999-07-13 Thread Wyatt, Anthony
> Stephen Hocking wrote: > you discover when RTFMing. Oddly enough, running nmap with > the Christmas tree > scan (after I've allowed only smtp & ssh to be connected to) > gives the > following - > > Initiating FIN,NULL, UDP, or Xmas stealth scan against foo.bar.com > Nmap run completed -- 1

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Stephen Hocking-Senior Programmer PGS Tensor Perth
Thanks for every one's help - I now have it working nicely. It's amazing what you discover when RTFMing. Oddly enough, running nmap with the Christmas tree scan (after I've allowed only smtp & ssh to be connected to) gives the following - # ./nmap -v -v -sX foo Starting nmap V. 2.12 by Fyodor

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Matthew Dillon
:Thanks for every one's help - I now have it working nicely. It's amazing what :you discover when RTFMing. Oddly enough, running nmap with the Christmas tree :scan (after I've allowed only smtp & ssh to be connected to) gives the :following - : :# ./nmap -v -v -sX foo : :Starting nmap V. 2.12 b

RE: Setting up a firewall with dynamic IPs

1999-07-13 Thread Wyatt, Anthony
> Stephen Hocking wrote: > you discover when RTFMing. Oddly enough, running nmap with > the Christmas tree > scan (after I've allowed only smtp & ssh to be connected to) > gives the > following - > > Initiating FIN,NULL, UDP, or Xmas stealth scan against foo.bar.com > Nmap run completed -- 1

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Brian Somers
> I was checking out the firewall setup in /etc/rc.firewall, and noticed that > the simple example relied on a fixed IP address for the external interface. I > don't know ahead of time what IP address is going to be allocated to me > before > I dial up. Would it be possible to specify an interf

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Stephen Hocking-Senior Programmer PGS Tensor Perth
Thanks for every one's help - I now have it working nicely. It's amazing what you discover when RTFMing. Oddly enough, running nmap with the Christmas tree scan (after I've allowed only smtp & ssh to be connected to) gives the following - # ./nmap -v -v -sX foo Starting nmap V. 2.12 by Fyodor

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Brian Somers
> I was checking out the firewall setup in /etc/rc.firewall, and noticed that > the simple example relied on a fixed IP address for the external interface. I > don't know ahead of time what IP address is going to be allocated to me before > I dial up. Would it be possible to specify an interfac

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Kris Kennaway
On Tue, 13 Jul 1999, Jon Hamilton wrote: > } You could probably do it from /etc/ppp/ppp.linkup, which knows your IP > } address as MYADDR. But if you just have asingle machine on the end of the > } dialup then > > You can do it as the original poster was thinking as well by specifying the > "re

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Brian F. Feldman
On Tue, 13 Jul 1999, Stephen Hocking-Senior Programmer PGS Tensor Perth wrote: > I was checking out the firewall setup in /etc/rc.firewall, and noticed that > the simple example relied on a fixed IP address for the external interface. I > don't know ahead of time what IP address is going to be a

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Jon Hamilton
In message , Kris Kennaway wrote : } On Tue, 13 Jul 1999, Stephen Hocking-Senior Programmer PGS Tensor Perth wrote } : } } > I was checking out the firewall setup in /etc/rc.firewall, and noticed } > that the simple example relied on a fixed IP address for the external } > interface. I don't k

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Kris Kennaway
On Tue, 13 Jul 1999, Jon Hamilton wrote: > } You could probably do it from /etc/ppp/ppp.linkup, which knows your IP > } address as MYADDR. But if you just have asingle machine on the end of the > } dialup then > > You can do it as the original poster was thinking as well by specifying the > "r

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Brian F. Feldman
On Tue, 13 Jul 1999, Stephen Hocking-Senior Programmer PGS Tensor Perth wrote: > I was checking out the firewall setup in /etc/rc.firewall, and noticed that > the simple example relied on a fixed IP address for the external interface. I > don't know ahead of time what IP address is going to be

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Keith Stevenson
On Tue, Jul 13, 1999 at 10:16:32PM +0930, Kris Kennaway wrote: > On Tue, 13 Jul 1999, Stephen Hocking-Senior Programmer PGS Tensor Perth wrote: > > > I was checking out the firewall setup in /etc/rc.firewall, and noticed that > > the simple example relied on a fixed IP address for the external in

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Kris Kennaway
On Tue, 13 Jul 1999, Stephen Hocking-Senior Programmer PGS Tensor Perth wrote: > I was checking out the firewall setup in /etc/rc.firewall, and noticed that > the simple example relied on a fixed IP address for the external interface. I > don't know ahead of time what IP address is going to be a

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Jon Hamilton
In message , Kris Kennaway wrote : } On Tue, 13 Jul 1999, Stephen Hocking-Senior Programmer PGS Tensor Perth wrote } : } } > I was checking out the firewall setup in /etc/rc.firewall, and noticed } > that the simple example relied on a fixed IP add

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Keith Stevenson
On Tue, Jul 13, 1999 at 10:16:32PM +0930, Kris Kennaway wrote: > On Tue, 13 Jul 1999, Stephen Hocking-Senior Programmer PGS Tensor Perth wrote: > > > I was checking out the firewall setup in /etc/rc.firewall, and noticed that > > the simple example relied on a fixed IP address for the external i

Re: Setting up a firewall with dynamic IPs

1999-07-13 Thread Kris Kennaway
On Tue, 13 Jul 1999, Stephen Hocking-Senior Programmer PGS Tensor Perth wrote: > I was checking out the firewall setup in /etc/rc.firewall, and noticed that > the simple example relied on a fixed IP address for the external interface. I > don't know ahead of time what IP address is going to be

Setting up a firewall with dynamic IPs

1999-07-13 Thread Stephen Hocking-Senior Programmer PGS Tensor Perth
I was checking out the firewall setup in /etc/rc.firewall, and noticed that the simple example relied on a fixed IP address for the external interface. I don't know ahead of time what IP address is going to be allocated to me before I dial up. Would it be possible to specify an interface (tun0)

Setting up a firewall with dynamic IPs

1999-07-13 Thread Stephen Hocking-Senior Programmer PGS Tensor Perth
I was checking out the firewall setup in /etc/rc.firewall, and noticed that the simple example relied on a fixed IP address for the external interface. I don't know ahead of time what IP address is going to be allocated to me before I dial up. Would it be possible to specify an interface (tun0)