Port blocking in MonMotha FIrewall ver 2.3.8-pre 2

[beesond001 at hawaii.rr.com]

MonMotha,

	Thanks very much!!!

VR,
Ben 

>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<

On 2/17/02, 1:10:14 PM, MonMotha <monmotha at indy.rr.com> wrote regarding 
[luau] Re: Port blocking in MonMotha FIrewall ver 2.3.8-pre 2:


> The INTERNAL_LAN is always considered "trusted" and is granted full
> access to the system.  TCP_ALLOW and friends apply only to the
> INET_IFACE.  So you can get rid of 22 in TCP_ALLOW and have it blocked
> from the internet, but still available from your LAN.

> --MonMotha

> beesond001 at hawaii.rr.com wrote:
> > Aloha all,
> >
> >     After reading the notes in the script, it seems to me that if I 
delete
> > the secure shell port from my firewall under the "TCP_ALLOW" variable, I
> > may be unable to get into my firewall via ssh.  I would like to be able
> > to use ssh to access my router from the internal lan, but not the
> > internet.  In other words, I want to block port 22 on the INET_IFACE and
> > allow it on the LAN_IFACE.  Does anyone know of a convenient way to do
> > this?  I am trying to close one more hole on my router.
> >
> > Mahalos in advance,
> >
> > Ben
> >
> > ---
> > You are currently subscribed to luau as: monmotha at indy.rr.com
> > To unsubscribe send a blank email to leave-luau-1626X at list.luau.hi.net
> >
> >



> ---
> You are currently subscribed to luau as: beesond001 at hawaii.rr.com
> To unsubscribe send a blank email to $subst('Email.Unsub')