sslug-teknik team mailing list archive

[Atte André Jensen <atte@xxxxxxxxxx>]

Ok, jeg har fulgt anvisningerne i Friheden til pkt og prikke, og det
virker glimrende. Eneste problem er at der ikke er åben for ftp fra
selve firewall'en, men kun fra lokalnettet bagved. Jeg har nemlig brug
for at uploade filer fra den maskine, så hvordan åbner jeg for det???
Jeg antager det er en regel som mangler, og ikke en regel som blokerer,
eftersom jeg godt kan ftp'e hvis jeg ændrer default policy på input til
accept...

Lige nu har jeg:

[root@silkeborg root]# ipchains -L
Chain input (policy DENY):
target     prot opt     source                destination          
ports
ACCEPT     all  ------  anywhere             anywhere              n/a
ACCEPT     all  ------  anywhere             anywhere              n/a
DENY       all  ------  192.168.0.0/24       anywhere              n/a
ACCEPT     tcp  !y----  anywhere             anywhere              any
->   any
ACCEPT     tcp  -y----  anywhere             anywhere              any
->   www
ACCEPT     tcp  -y----  anywhere             anywhere              any
->   https
ACCEPT     tcp  -y----  anywhere             anywhere              any
->   auth
ACCEPT     tcp  -y----  anywhere             anywhere             
ftp-data ->   56000:65096
ACCEPT     udp  ------  anywhere             anywhere             
domain ->   56000:65096
ACCEPT     udp  ------  anywhere             anywhere              any
->   32768:37769
DENY       icmp ----l-  anywhere             anywhere             
redirect
DENY       icmp ----l-  anywhere             anywhere             
timestamp-request
DENY       icmp ----l-  anywhere             anywhere             
address-mask-request
ACCEPT     icmp ------  anywhere             anywhere              any
->   any
-          all  ----l-  anywhere             anywhere              n/a
Chain forward (policy DENY):
target     prot opt     source                destination          
ports
MASQ       all  ------  anywhere             anywhere              n/a
Chain output (policy ACCEPT):


-- 
peace, love & harmony
Atte