FireHOL firewall, "allow all, deny x, deny y, deny z"
  Home FAQ Contact Sign in
comp.os.linux.security only
 
Advanced search
POPULAR GROUPS

more...

comp.os.linux.security Profile…
 Up
FireHOL firewall, "allow all, deny x, deny y, deny z"         


Author: Flo Sidler
Date: Jul 17, 2008 08:33

Hello there.

Eventhough nobody would ever want to attack a useless no-thing-doing
dedicated machine like mine, i want to add a little bit o fsecurity to
it by using a simple firewall.
I have, in the past, used "FireHOL" for these tasks.

Now, here's my problem:

I want my machine to generally allow all client ports but deny some,
and generally deny all server ports but allow some.

Now, denying all server ports but allowing specific ports is easy; By
simply writing a line for every server port i wish to allow, the rest
remains blocked.

However, how do i set it up to allow all client ports, but deny some
specific ones?

I tried to do it like this:
Show full article (1.22Kb)
2 Comments
Re: FireHOL firewall, "allow all, deny x, deny y, deny z"         


Author: Bill Marcum
Date: Jul 17, 2008 10:06

On 2008-07-17, Flo Sidler gmail.com> wrote:
>
>
> Hello there.
>
> Eventhough nobody would ever want to attack a useless no-thing-doing
> dedicated machine like mine, i want to add a little bit o fsecurity to
> it by using a simple firewall.
> I have, in the past, used "FireHOL" for these tasks.
>
> Now, here's my problem:
>
> I want my machine to generally allow all client ports but deny some,
> and generally deny all server ports but allow some.
>
> Now, denying all server ports but allowing specific ports is easy; By
> simply writing a line for every server port i wish to allow, the rest
> remains blocked.
>
> However, how do i set it up to allow all client ports, but deny some ...
Show full article (1.36Kb)
no comments
Re: FireHOL firewall, "allow all, deny x, deny y, deny z"         


Author: Flo Sidler
Date: Jul 17, 2008 10:49

On Jul 17, 7:06 pm, Bill Marcum bellsouth.net> wrote:
>
> Try moving "client all accept" to the end.

Sigh.. could have thought of this myself. Thanks a lot, worked
perfectly.
Sorry for any persons time i may have wasted.
no comments