On 4/24/2015 6:57 PM, Guilsson . wrote: > I'm trying to use ipsets with Shorewall. > I read CAREFULLY http://shorewall.net/ipsets.html > > I setup a very simple firewall with Shorewall 4.6.8 in a Fedora 17 with > ipset installed. > Two Interfaces (net and loc); simple policy masq interfaces zone. > > I went directly to try IPsets. > > Documentation says: > ------------------------------------------------------------------------ > > *Example 1*: Blacklist all hosts in an ipset named "blacklist" > > |/etc/shorewall/blacklist| > > #ADDRESS/SUBNET PROTOCOL PORT > +blacklist > > ------------------------------------------------------------------------ > Question 1: Do I define ipset "blacklist" inside a file with the same name ? > >
No. > > > Documentation says: > ------------------------------------------------------------------------ > > *Example 2*: Allow SSH from all hosts in an ipset named "sshok: > > |/etc/shorewall/rules| > > #ACTION SOURCE DEST PROTO DEST PORT(S) > ACCEPT net:+sshok $FW tcp 22 > > ------------------------------------------------------------------------ > Question 2: Where a define the hosts of "sshok" ? All ipset content management is done through the ipset utility. -Tom -- Tom Tom Eastep http://www.shorewall.net
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
