Hi All,
ada yang make shorewall ngak ? boleh dong liat 'jeroan' setting konfigurasi
:
Default Policies (policy),Firewall Rules(rules),Types of
Service(tos),Masquerading(masq),Static NAT,(nat)
Proxy ARP(proxyarp),When Stopped(routestopped),VPN Tunnels(tunnels),Zone
Hosts(hosts)
info:
LAN: 192.168.1.0/24
GATEWAY= 2 interfaces : eth0(public) + eth1(private)
ROUTER=202.xxx.xxx.xxxx
** rencana mau blok port MSN + YM sekalian..
ada yg bisa bantu ?
contoh scripts saya
===========
file zones
#ZONE DISPLAY COMMENTS
net Net Internet
loc Local Local Networks
======rules
ACCEPT fw net tcp 53
ACCEPT fw net udp 53
ACCEPT loc net tcp 53
ACCEPT loc net udp 53
ACCEPT fw loc tcp 53
ACCEPT fw loc udp 53
#
# Accept SSH connections from the local network for administration
#
ACCEPT loc fw tcp 22
ACCEPT fw loc tcp 22
ACCEPT loc fw tcp 10000
#
#Drop Local User
#
#Komputer B
DROP loc:eth0:192.168.0.33 fw tcp 8080,80,443,3128
DROP loc:eth0:192.168.0.33 fw udp 8080,80,443,3128
#Komputer A
DROP loc:eth0:192.168.0.34 fw tcp 8080,80,443,3128
DROP loc:eth0:192.168.0.34 fw udp 8080,80,443,3128
#
# Allow Ping To And From Firewall
#
ACCEPT loc fw icmp 3
ACCEPT loc fw icmp 8
ACCEPT loc fw icmp 11
ACCEPT fw loc icmp 3
ACCEPT fw loc icmp 8
ACCEPT fw loc icmp 11
ACCEPT fw net icmp 3
ACCEPT fw net icmp 8
ACCEPT fw net icmp 11
# Transparent Proxy
REDIRECT loc 3128 tcp 8080,80,443 -
====masq
eth1 eth0 xxx.x.xxx.xxx tcp 25
eth1 eth0 xxx.x.xxx.xxx
===policy
#SOURCE DEST POLICY LOG LEVEL LIMIT:BURST
loc net ACCEPT
loc fw ACCEPT
# If you want open access to the Internet from your Firewall
# remove the comment from the following line.
fw net ACCEPT
fw loc ACCEPT
net all DROP info
# THE FOLLOWING POLICY MUST BE LAST
all all REJECT info
=====interfaces
#ZONE INTERFACE BROADCAST OPTIONS
net eth1 detect routefilter,norfc1918,blacklist,tcpflags
loc eth0 detect
semoga membantu
salam,
eddy
--
Unsubscribe: kirim email kosong ke [EMAIL PROTECTED]
Arsip, FAQ, dan info milis di http://linux.or.id/milis.php
Tidak bisa posting? Baca:
http://linux.or.id/wiki/index.php?pagename=ProblemMilisDanSolusi
http://linux.or.id/wiki/index.php?pagename=TataTertibMilis
