Re: hi guys passive firewall

[Remo Mattei]

Antony Stone wrote:

20020707080609.TFPL23840.mta03-svc.ntlworld.com@there">

On Sunday 07 July 2002 4:20 am, Remo Mattei wrote:

I have an office with 64 ips which are all valid. I have some server
that do not need any security enable.

20020707080609.TFPL23840.mta03-svc.ntlworld.com@there">

Oh yeah ?   What kind of servers are those, then ?   How come they're not 
vulnerable to anything and therefore don't need any security :-) ?

I guess I should say that the server itself have a firewall not that do not need any security on them!!!

20020707080609.TFPL23840.mta03-svc.ntlworld.com@there">

But I do have other that I will
have to firewall down any suggestions? Will all rules come in into the
input chains and then forward all other packages work.

Depends whether you're talking about putting netfilter onto the server itself 
(in which case you filter the INPUT chain), or whether netfilter is on a 
router between the servers and the Internet (in which case you filter the 
FORWARD chain).

So I guess since the anwser is above I just will use the forward and let everything pass in the input.

Thanks anthony

20020707080609.TFPL23840.mta03-svc.ntlworld.com@there">

 

Antony.