Em Qui, 2004-11-18 às 02:35 +0100, Alexander Dalloz escreveu: > Am Do, den 18.11.2004 schrieb Vinicius um 1:31: > > > how to configure system-config-securitylevel-tui to permit only the > > internal LAN to access my ADSL router and to block the others, please? > > > > TIA, Vinicius. > > You can't by using this tool. > > I guess the ADSL router is your Fedora machine (else the question would > not make much sense in it's form) and you have 2 network cards and thus > 2 ethernet devices in the Fedora based router. You will have to have > some clue about the iptables syntax to make the necessary changes to the > existing /etc/sysconfig/iptables set of rules. As the FORWARD chain uses > the same rules as the INPUT chain it would break the forwarding of the > router if you limit the traffic by adding "-s $INTERNAL_NET" to the > ACCEPT rule lines. Running a router you should get in touch with > iptables itself (www.netfilter.org). Though there are tools like > firestarter which are mightier than the system-config tool and for those > which prefer click&run over hand editing a plain text file. > > Alexander > In the scenario below, does an ADSL modem (router) in generally defaults to deny access to the ports 21, 23 and 80, please? TIA, Vinicius. ------------ | | | Internet | | | ------------ | -------------- | Public IP | -- --- -- | | | M. ADSL | | | -- --- -- | Private IP | -------------- | ------------ | | | Private | | Network | | | ------------
Attachment:
signature.asc
Description: Esta =?ISO-8859-1?Q?=E9?= uma parte de mensagem assinada digitalmente