[luau] Quick and dirty ipfilter question

yuser at hi.net yuser at hi.net
Thu Dec 5 16:29:00 PST 2002


I recently upgraded a 7.1 RH machine and now I need a really quick 
crash course in ipfilter.  How can I convert the below to an ipfilter 
format?  I found some automated tools to go from ipfwadm to ipchains 
but that is obviously not what I need.  I am reading the RTFM's and I 
will eventually get a grip on ipfilter but I don't want to leave 
myself open in the mean time.  Below is what I was using.  It allows 
SSH in from 2 places, localnet and my work firewall.  I do not need a 
full blown firewall because this machine is already behind one but 
port 22 is forwarded here so I am limiting it locally.

/sbin/ipchains -I input 1 -j ACCEPT -p tcp -s 63.13.13.2 -d 0/0 22
/sbin/ipchains -I input 1 -j ACCEPT -p tcp -s 192.168.0.0/24 -d 0/0 2
/sbin/ipchains -A input -j DENY -p tcp -s 0/0 -d 0/0 22

The only interface is eth0 and ip is 192.168.0.1 if ipfilter needs 
that extra info.  Maybe I'll have it working soon on my own but 
thanks ahead for any tips.







More information about the LUAU mailing list