| View previous topic :: View next topic |
| Author |
Message |
xierxior
Tux's lil' helper
Joined: 04 Feb 2004
Posts: 96
|
 Posted: Fri Mar 11, 2005 1:31 am Post subject: firehol port range |
 |
|
| Code: |
interface eth0 lan
policy drop
client dhcp accept
server ICMP accept
server ssh accept
client all accept
server ident reject with tcp-reset
|
that's my current firewall config i'd like to setup a tcp port range of 7000:8000 how would I do this? |
|
| Back to top |
|
 |
Jerri
Guru
Joined: 03 Apr 2003
Posts: 353
|
| Posted: Fri Mar 11, 2005 4:14 am Post subject: |
|
|
| Quote: | | tcp port range of 7000:8000 |
that doesnt really tell us much.. If you are setting up a dedicated firewall... look into ipcop. it rules (thats sort of a non answer, but I just found it recently, after tyring out a bunch of others (manual iptables script / firehol etc.) |
|
| Back to top |
|
|
xierxior
Tux's lil' helper
Joined: 04 Feb 2004
Posts: 96
|
| Posted: Fri Mar 11, 2005 4:46 am Post subject: |
|
|
| there should be a way to do it with firehol i'm not asking for anything difficult just a TCP port range a set of ports open between 7000 and 8000 |
|
| Back to top |
|
|
xierxior
Tux's lil' helper
Joined: 04 Feb 2004
Posts: 96
|
| Posted: Fri Mar 11, 2005 9:56 am Post subject: |
|
|
| I don't believe that NO ONE is running a port range to send file thought IRC and aim/yahoo/msn ? |
|
| Back to top |
|
|
xierxior
Tux's lil' helper
Joined: 04 Feb 2004
Posts: 96
|
| Posted: Sat Mar 12, 2005 9:50 pm Post subject: |
|
|
| Code: |
interface eth0 lan
policy drop
client dhcp accept
server ICMP accept
server ssh accept
client all accept
server ident reject with tcp-reset
iptables -A OUTPUT -p tcp -m tcp --dport 7000:8000 -j ACCEPT
|
Thanks for all the help... cough... gag... |
|
| Back to top |
|
|
Ox-
Guru
Joined: 19 Jun 2003
Posts: 305
|
| Posted: Sun Mar 13, 2005 1:23 am Post subject: |
|
|
Put the following somewhere at the top of your firehol.conf: | Code: | server_XXX_ports="tcp/7000:8000"
client_XXX_ports="default" |
but change XXX to whatever you want of course.
Then you only need to add this to your interface block:
Btw, the guy who wrote firehol is very very responsive on his sourceforge forum. |
|
| Back to top |
|
|
|
Networking & Security
