|
Firewalls (August 1997) |
>I'm attempting to setup a FW-1 filter to support PPTP. >I'm using FW-1 3.0a on Solaris. > >PPTP is not defined, how do I seutp a fitler just for PPTP not all IP? > >Thanks In Advance >Bert Carroll Hmmm, we did this in class last week, its not as GUI as one might think! Try: Define service pptp TCP 5678 "control" Define service, other, match IP_P = 47 Define service, other match IP_P = 47, ([20:2, b]) & 0xEF7F = 0x2001, [22:2, b] = 0x800 Maybe that will get you close :)
|