gunn on Thu, 30 Aug 2001 16:20:16 +0200 |
Jeff Dean wrote: > Hi everyone. I really should just figure this out myself, but I'm in quite > a hurry. I have an e-smith server (RH7.0 based mail/gateway - > http://www.e-smith.org) with two nics at a non-profit school. One side is > on a private 10.0.0.0/16 LAN, the other is in a DMZ. The e-smith server is > wide open from the inside and locked down from the DMZ (except for http and > smtp). I need to limit access to the web from all inside systems except my > proxy servers/web filters (10.0.0.4, currently). I'm no routing guy, but > can get the ipchains commands in where necessary. Does anyone know the > magic, and where to put it? I'd really appreciate your help... > default rule reject one rule accept ip ???.???.???.??? there is a sysconfig ipchains file. or there is always rc.local. ______________________________________________________________________ Philadelphia Linux Users Group - http://www.phillylinux.org Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce General Discussion - http://lists.phillylinux.org/mail/listinfo/plug
|
|