I'm trying to use ipsets with Shorewall.
I read CAREFULLY http://shorewall.net/ipsets.html
I setup a very simple firewall with Shorewall 4.6.8 in a Fedora 17 with
ipset installed.
Two Interfaces (net and loc); simple policy masq interfaces zone.
I went directly to try IPsets.
Documentation says:
------------------------------
*Example 1*: Blacklist all hosts in an ipset named "blacklist"
/etc/shorewall/blacklist
#ADDRESS/SUBNET PROTOCOL PORT
+blacklist
------------------------------
Question 1: Do I define ipset "blacklist" inside a file with the same name ?
Documentation says:
------------------------------
*Example 2*: Allow SSH from all hosts in an ipset named "sshok:
/etc/shorewall/rules
#ACTION SOURCE DEST PROTO DEST PORT(S)
ACCEPT net:+sshok $FW tcp 22
------------------------------
Question 2: Where a define the hosts of "sshok" ?
Thanks
------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
