Great Circle Associates Firewalls
(July 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: FWTK proxys and ...
From: DOMINGO VARELA YAHUITL <ydomingo @ cen . buap . mx>
Date: Thu, 31 Jul 1997 10:40:23 +0000 (GMT)
To: "Joseph S. D. Yao" <jsdy @ cospo . osis . gov>
Cc: chrisn @ softway . com . au, firewalls @ greatcircle . com
In-reply-to: <9707301942 . AA07861 @ relay2 . cospo . osis . gov>

Hello all, thanks for your information, with respect the file of 
configuration  of TIS FWTK,  is netperm-table, this file already the 
check and all are correct, and in the /ect/inetd.conf I added the lines 

tn-gw stream ... 
ftp-gw ... 

 ye I have two doubts

Firts: When I make telnet of my private net the firewall  from machine 
that have windows the promtp is this:
by example:
telnet 192.168.2.1   <----- Interface of firewalls
(a message of welcome ..)
tn-gw>
 then from here all the user can to make telnet the Internet, (This is 
correct), yet the that I want is that all the user can exit the Internet 
direct, is possible or not. if no is possible then from tn-gw> they can 
to make telnet a Internet true... 

Second: The make ftp tha firewall, I the maked a this interface that is 
of the firewall 192.168.2.1, this is correct??? or not...
is necessary that the user that are in the private net haved account in 
my box??? for to make ftp or not???
 or to make ftp a out they that can to make to conection, if the ftp 
services open two conection one that is server and other that is client, 
then how can I to exit direct a Internet and not stop in the firewalls, 
is possible this??? or is necessary to be in the firewalls to make the 
ftp a other  sities of world


I forget, for the WWW, is necessary modif the file /etc/services in my 
box  and the services of the machine with windows to so to exit direct a 
Internet with port not 80, in the port 1080 by example... and the 
services as telnet from firewall conect with the port 24 and the ftp 
conect with port mmmm 21 or other... 

I have tha modifi this files, true.. already the maked. :) ...

I hope to make the correct ... :) or not :((


Thank very munch for your helps...

Domingo Varela Y.


Follow-Ups:
References:
Indexed By Date Previous: Re: [FW1] Checkpoint and SMP (Was :Virus Protection on FW-1)
From: Tycho Fruru <tycho @ netvision . be>
Next: Drop Source routed packets atack ??
From: Informacion sobre seguridad <seguridad @ iti . upv . es>
Indexed By Thread Previous: Re: FWTK proxys and ...
From: "Joseph S. D. Yao" <jsdy @ cospo . osis . gov>
Next: Re: FWTK proxys and ...
From: "Joseph S. D. Yao" <jsdy @ cospo . osis . gov>

Google
 
Search Internet Search www.greatcircle.com