Firewall quetion

[der.hans]

Am 10. Jan, 2001 schwäzte David Demland so:

> I have a Storm box that is a firewall for our T1 line. There are times we
> need to run a demo from one of our interal servers through the firewall. The

Does the net need unfettered access to the box or just for a particular
service?

If it's a service that can easily be 'forwarded' you just need to add a
forwarding rule that can easily be deleted once you're done.

# needed to do portforwarding to another machine
/sbin/modprobe ip_masq_portfw
ipmasqadm portfw -a -P tcp -L $EXTIP $FROM_PORT -R $HOST $TO_PORT

The above vars need match what you want to be forwarded.

This is cake for most tcp services. Not sure that there's something for
udp.

ciao,

der.hans
-- 
#  der.hans@LuftHans.com   home.pages.de/~lufthans/   www.Opnix.com
#  The only way for a woman to change a man
#  is if he's wearing Depends[TM] - der.hans