LeRoy Cressy on Wed, 27 Aug 2003 15:05:27 -0400


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] opening firewall ports


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

As Mike said it depends upon the firewall that you are using and who has root access to the firewall. For instance if you are using iptables, edit the script and edit it accordingly like:

iptables -A block -m state --state NEW -p tcp -i eth0 --dport 80 \
   -m limit --limit 1/hour  -j LOG --log-level info --log-prefix \
   "Web Access Request "
iptables -A block -m state --state NEW -p tcp -i eth0 --dport 80 \
   -j ACCEPT

which would allow port 80 access from eth0 and also log the access.
sue swanson mitchell wrote:
how does one reopen fire wall ports after they have been locked down

- -- Rev. LeRoy D. Cressy mailto:leroy@lrcressy.com /\_/\
http://lrcressy.com ( o.o )
Phone: 215-535-4037 > ^ <


gpg fingerprint:  62DE 6CAB CEE1 B1B3 359A  81D8 3FEF E6DA 8501 AFEA

For info on enigmail:    http://lrcressy.com/linux/mozilla.pdf
For info on gpg:         http://www.gnupg.org/

Jesus saith unto him, I am the way, the truth, and the life:
no man cometh unto the Father, but by me. (John 14:6)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Netscape - http://enigmail.mozdev.org

iD8DBQE/TQA2P+/m2oUBr+oRAp0WAJ0atJpYn7p47FyDOy+QZLbftjINzgCaAyiE
xEJ0rPxSoDixo1xmnykU5go=
=Nf99
-----END PGP SIGNATURE-----

_________________________________________________________________________
Philadelphia Linux Users Group        --       http://www.phillylinux.org
Announcements - http://lists.netisland.net/mailman/listinfo/plug-announce
General Discussion  --   http://lists.netisland.net/mailman/listinfo/plug