hi slugs,

as i've spent days mucking around with ipchains and still seem to muck
things up.
i thought i'd ask a few questions to clarify my ideas on ipchains and
how it should best be set up in a particular situation.

is the following a good way to think about the ipchains rules?

define a new chain name.
ipchains -N dmz-bad

define the new chain route/direction of packets.
ie. if going from ip - from interface - to ip - jumpto dmz-bad.
ipchains -A input -s 1.2.3.4 -i eth0 -d  5.6.7.8 -j dmz-bad

define the rules for the ports in dmz-bad
ipchains -A dmz-bad -p tcp --sport 80 --dport 80 -j ACCEPT

does this make sense or is there a hole somewhere? disregarding the
default rules of course.


--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text

Reply via email to