-------- Original Message --------
Subject: nis ipmasquerading
Date: Wed, 14 Oct 1998 08:10:19 -0700
From: Slava Voronin <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Until recently, I used socks for firewalling and I now switched to IP
masquerading.
I installed NIS (Yellow Pages) to keep password's database on one
computer.
After that, I got email from one guy who appeared to be on the same
segment of
rogers wave. He sent me a message and asked me to stop attack his
computer.
He also sent me a log file. It appears my linux box was sending UDP
packets
aiming at port 111 all over the segment. Now I installed NIS on my
internal linux
box which also has NT on other partition. So, I need to bring that NIS
server
back on my main linux box, which is directly connected to rogers wave.
Can someone give me exact ipfwadm rules to keep my external interface
(eth2)
from sending out the packets all over my rogers segment?
Something like ipfadm ??? udp ??? 24.113.3.19/??
???/??
My external interface (eth2) has IP 24.113.3.19 netmask 255.255.252.0.
My interanl network (eth0) has network number 192.168.1.0 netmask
255.255.255.0
My other internal network (eth1) 192.168.2.0 netmask 255.255.255.0
NIS sends packets out there which are UDP and port 111 on eth2,
Right now, I can't experiement with it myself. I don't have that exact
configuration
and I am not able write these lines on the fly.
Thanks
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]
