HI.

My plan is to limit the ip address 192.168.3.150 to the local zone only.

First my policy:

loc all ACCEPT
fw all ACCEPT
net all DROP
all all REJECT

and my rules

ACCEPT  net fw  icmp
ACCEPT net fw tcp 80
#ACCEPT net fw tcp 20
#ACCEPT net fw tcp 21
ACCEPT net fw tcp ssh
ACCEPT net fw tcp 49160:49300

when i add the rule

REJECT loc:192.168.3.150 net all -

and refresh schorewall of cause, nothing happens. He can still access  
the i net with the given ip.
I would be even happier if i could limit him by his mac address but  
thats not to important.

So please tell me what i got wrong.

Toralf

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to