Firewall quetion

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: der.hansPLUGd@LuftHans.com
Date:  
Subject: Firewall quetion
Am 10. Jan, 2001 schwäzte David Demland so:

> I have a Storm box that is a firewall for our T1 line. There are times we
> need to run a demo from one of our interal servers through the firewall. The


Does the net need unfettered access to the box or just for a particular
service?

If it's a service that can easily be 'forwarded' you just need to add a
forwarding rule that can easily be deleted once you're done.

# needed to do portforwarding to another machine
/sbin/modprobe ip_masq_portfw
ipmasqadm portfw -a -P tcp -L $EXTIP $FROM_PORT -R $HOST $TO_PORT

The above vars need match what you want to be forwarded.

This is cake for most tcp services. Not sure that there's something for
udp.

ciao,

der.hans
--
# home.pages.de/~lufthans/ www.Opnix.com
# The only way for a woman to change a man
# is if he's wearing Depends[TM] - der.hans