Re: ipfwadm on Version 2.1.102

Paul Rusty Russell (Paul.Russell@rustcorp.com.au)
Sun, 17 May 1998 16:06:56 +0930


In message <355E0B22.1A31BABA@CSUPomona.edu> you write:
> #ipfwadm -I -a deny -W ppp0 -P tcp -D 0/0 139
> ipchains -A input -s 0/0 -d 0/0 139:139 -i ppp0 -p tcp -j DENY

Well, better is:
ipchains -A input -d 0/0 139 -i ppp0 -p tcp -j DENY

-s 0/0 is the default, and you don't need a range...

> Hope that helped. It took me a little under an hour to get the
> translation right, but it works. If you use the "ipchains-save" and
> "ipchains-restore" commands, you can replace all the ipchains calls in
> the startup script with one simple "ipchains-restore
> /path/to/ipchain.config"

Of course, you have to have the latest ipchains-save, which actually
works as documented (been on the web page for *minutes* now).

Thanks for the examples.
Rusty.

--
 .sig lost in the mail.

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu