System: Bering-uClibc 2.4.2, uClibc 0.9.20 Rev 1, linux 2.4.32, and shorewall 3.0.7
This is a very basic (almost default) Bering setup. This is the first time I've tried to modify the Rules file since I set up the firewall 3-4 years ago. I wish to inhibit (REJECT or DROP) outgoing connections to www.myspace.com from one computer (a windows PC) on the loc zone. I've tried several variations of the rules shown below. Neither the DROP nor the REJECT actions appear to work (i.e., I am still able to connect an IE browser to the myspace web site). I determined which IP addresses to use in these rules via ping www.myspace.com. It appears they use an IP hopping scheme amongst a limited set of IPs that change rather frequently. I've tried both www and http in the protocol column. I've also tried adding these rules to the ESTABLISHED section in addition to the NEW section. Nothing seems to work. Following the recommended guidelines for requesting assistance, I've attached a gzipped Shorewall dump created after successfully connecting to the undesired web site while Shorewall was running with these rules in place. Offending entries in Rules file (NEW Section): # Disallow outgoing connection requests to myspace.com DROP loc:192.168.1.3 net:63.135.80.45 tcp www - - DROP loc:192.168.1.3 net:63.135.80.46 tcp www - - DROP loc:192.168.1.3 net:63.135.80.47 tcp www - - DROP loc:192.168.1.3 net:216.178.39.11 tcp www - - DROP loc:192.168.1.3 net:216.178.39.12 tcp www - - DROP loc:192.168.1.3 net:216.178.39.129 tcp www - - DROP loc:192.168.1.3 net:64.86.183.91 tcp www - - DROP loc:192.168.1.3 net:64.86.183.146 tcp www - - Any assistance provided will be greatly appreciated. Please let me know if any additional information is required. mike
DUMP.GZ
Description: GNU Zip compressed data
------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
