Re: [Sheflug] Firewall config - for Ross.

[Barrie Bremner <nospam [at] barriebremner.com>]

>>>>> "ross" == ross h <ross> writes:

    ross> On Thursday 17 May 2001 22:50, you wrote:
    >> There is a patch on the netfilter website, but the best way is
    >> to grab kernel-2.4.4 and build it.
    >> 
    >> Yeap, when your box tries to hack into NASA without your
    >> permission, you know that your firewall wasn't working :-)
    >> Recompiling the kernel is easy enough once you figure it - just
    >> remember to keep the old kernel installed, until you know the
    >> new one boots and runs OK!

    ross> ok.. i'll give it another go!

    ross> can you remind me how i use the old config file to configure
    ross> the new kernel?

    ross> make xconfig -oldconfig

make oldconfig then the usual make dep, make everything else, edit
lilo.conf, run lilo, reboot stuff.

    ross> ??

    >>
    ross> can i acespt all packets from ppp1? if so how?
    >>  Erm - nasty!
    >> 
    >> iptables -I INPUT -i ppp1 -j ACCEPT iptables -I FORWARD -i ppp1
    >> -j ACCEPT iptables -I OUTPUT -o ppp1 -j ACCEPT iptables -I
    >> FORWARD -o ppp1 -j ACCEPT
    >> 

    ross> that'll do for now:-)

OK.

    >> If you want a hand, or a lesson in iptables, or ipchains, drop
    >> me a line, tell me want you want to do, and I'll help out.
    >> 

    ross> i've got a tutorial on iptables that i'm working through at
    ross> the mo...... i'll finish that and the man pages before i
    ross> bombard you with questions ;-) thanks for the
    ross> offer........ i will take you up on it if that's ok !

No problems at all - that's why I mentioned it :-)

Baz.
-- 
Barrie J. Bremner 		OpenPGP public key ID: 5164F553
baz [at] barriebremner.com	http://barriebremner.com/

baz /baz/ n.
 1. [common] The third metasyntactic variable.
 2. interj. A term of mild annoyance.
 3. Occasionally appended to foo to produce `foobaz'

	-- Jargon File v4.3.0, www.tuxedo.org/jargon

 4. Me.

---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.