Great Circle Associates Firewalls
(April 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: RE: NetBlazer filters
From: Ron A Lindsay <ronl @ earth . eng . vantageware . com>
Date: Fri, 14 Apr 95 22:13:27 PDT
To: firewalls @ GreatCircle . COM, "Samuel D. Jones" <sjones @ Aptech . com>

I had the same issue.  Try these filters:

configure ip filter permit <IP> inet_p     TCP      =25 =42 =53 Source In   
configure ip filter permit <IP> inet_p     UDP      =53 Source In   
configure ip filter permit <IP> inet_p     TCP      =25 =42 =53 =123 Dest   In   
configure ip filter permit <IP> inet_p     UDP      =53 Dest   In   
configure ip filter permit <IP> inet_p     TCP      =20 =21 =25 =42 =53 =119 =123 >=1024 Source Out  
configure ip filter permit <IP> inet_p     UDP      =53 Source Out  
configure ip filter permit <IP> inet_p     TCP      =25 =42 =53 >=1024 Dest   Out  
configure ip filter permit <IP> inet_p     UDP      =53 Dest   Out  
configure ip filter deny default inet_p  

<IP>=your IP addresss/subnet mask
inet_p=your internet interface name


Notice that ports > 1024 are allowed ONLY on outgoing connections (for sendmail, ftp, etc).
Ping does NOT work with this setup.
Good luck.

---------------Original Message---------------
I am trying to set up filters for a Telebit NetBlazer to
allow mail and outgoing ftp and telnet.  I want everything
else shut down. I would like to be able to ping also.

I have filters already in place, but I don't know if I
am missing something important.

Can anyone help me?

Samuel D. Jones

sam @
 Aptech .
 com


----------End of Original Message----------

----------------------------------------------------------------------
E-mail: ronl @
 vantageware .
 com (Ron A Lindsay)
----------------------------------------------------------------------



Indexed By Date Previous: Re: Perimeter networks (Was: DMZ ?s)
From: paul @ hawksbill . sprintmrn . com (Paul Ferguson)
Next: Re: Sysco Routers Son't Do Security
From: ATM_Feel_the_Power <joe @ net99 . net>
Indexed By Thread Previous: Re: NetBlazer filters
From: Sick Puppy <sikpuppy @ maestro . com>
Next: port of fwtk to BSD/OS 2.0
From: Tim Keanini <blast @ worldbit . com>

Google
 
Search Internet Search www.greatcircle.com