jkosin at beta.intcomgrp.com
Fri Dec 9 22:51:47 UTC 2005
-----BEGIN PGP SIGNED MESSAGE-----
Chasecreek Systemhouse wrote:
>Slightly OT, but ...
>Anyone have a favorite "iptables" support group or favorite How-To site?
>I would like to twist my mind around hooking together iptables, a
>multi NIC box/firewall, and a SQL database ... so no one surfs out
>unless there are satisfied/met conditions, etc...
>(As if I wasn't insane enough already...)
>WC -Sx- Jones | http://ccsh.us/ | Open Source Consulting
Iptables should be kept simple and to the point.
(1) At the bottom (last line) DISALLOW everything.
(2) Insert above rule #1 anything you want to allow.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
Scanned by ClamAV - http://www.clamav.net
More information about the fedora-list