I'm reposting this message, hoping someone can shed some light. I
haven't received any response on it when I first posted it on Oct. 13th.
----------------------------------------------------
I've got the following setup:
Linux box +---> eth0 ---> HUB ---> other machine (coyote)
ISP ===> w/ modem --|
+---> eth1 ---> masq network
When the Linux box dials up, the box gets assigned an IP number
(.73). eth0 is also configured as .73 and coyote as .75
On eth1, I have a private network (192.168.1.0). (the idea behind
this setup was that I can have some machines visible to the net, and other
behind a masq 'fence'...and this was the solution)
ipmasq rules, I have setup the following:
/sbin/ipfwadm -F -p deny
/sbin/ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0
/sbin/ipfwadm -F -a acc -D coyote
/sbin/ipfwadm -F -a acc -S coyote
And everything works. If I don't add those two last lines,
nothing will go to coyote because of the initial deny line.
But now, I'd like to block some traffic coming in to coyote (.75),
specifically, a domain name. If at all possible. How can I do that? I'm
assuming that I have to change my deny line somehow?
Suggestions? Comments?
AMK4
|
| Row, row, row your bits, gently down the pipe...
|____________________________________________________________________
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Ashley M. Kirchner <[EMAIL PROTECTED]> . 303.442.6410 x130
SysAdmin / Websmith . 800.441.3873 x130
Photo Craft Laboratories, Inc. . 3550 Arapahoe Ave
http://www.pcraft.com . Boulder, CO 80303
.................. . . . .
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]
