abusing ipchains

2001-08-14 Thread Linuxism Chang
I wonder whether it's possible to use ipchains to allow only gateway-workstation packet traffic, but not workstation-workstation packet traffic. _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

Re: abusing ipchains

2001-08-14 Thread Ian Marchak
Linuxism Chang wrote: I wonder whether it's possible to use ipchains to allow only gateway-workstation packet traffic, but not workstation-workstation packet traffic. If the machine running ipchains is the default gateway for the machines, then the traffic has to pass through (or at least

Re: abusing ipchains

2001-08-14 Thread Joel Hammer
dn Wed, Aug 15, 2001 at 10:41:02AM +0800, Linuxism Chang wrote: I wonder whether it's possible to use ipchains to allow only gateway-workstation packet traffic, but not workstation-workstation packet traffic. Wouldn't you have to put each workstation on its own network and the use the

Re: abusing ipchains

2001-08-14 Thread Linuxism Chang
I was just wondering about the possiblity of using tight control in a commercial environment. That would kill all client-to-client traffic, leaving only the server-client ones. What ere your ipchain rules? ipchains can reject/deny only, right? not discarding packets not targeting on you. I

Re: abusing ipchains

2001-08-14 Thread Linuxism Chang
that means adding rules into each workstation. can I use centralized control? Wouldn't you have to put each workstation on its own network and the use the gateway machine as a router for all internal traffic as well as external traffic? That might not be so hard, depending on the size of