On Sat, 21 Apr 2001, Eyal Lebedinsky wrote:
> The alcatel "speed touch" has a web server on 10.0.0.138. I can do:
> ifconfig eth0 10.0.0.1 netmask 255.255.255.0
> and then ping it (from the leaf machine). However I cannot do it
> from any other machine on my internal netwrok.
>
> I assume the firewall rules stop the access (the 10.* range is not
> forwarded).
>
> I want to allow explicit access to 10.0.0.138 (and nothing else) and
> still deny any incoming connections.
>
> Anyone done that?
I haven't done that myself, no. However, it should be just a matter of
adding an ACCEPT rule from 10.0.0.138/32 at the beginning of the IPChains
filter list. That should take care of the issue, yet still leave the
default Martian rules in place.
As for syntax, that I'm not too sure on since I'm weak on IPChains.
--
George Metz
Commercial Routing Engineer
[EMAIL PROTECTED]
"We know what deterrence was with 'mutually assured destruction' during
the Cold War. But what is deterrence in information warfare?" -- Brigadier
General Douglas Richardson, USAF, Commander - Space Warfare Center
_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/leaf-user
