This is a multi-part message in MIME format.
------=_NextPart_000_0015_01C1E08F.66DEB0E0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Hi Iv'e created a set of firewall rules (my first attempt, ipchains). I =
want to be able to serve webpages, access the server remotley via ssh =
and allow 2 computers FTP access. I don't want anyone or anythng else to =
go in or out of the server. This is running on RedHat 7.2
Here are the rules
:input ACCEPT
:forward ACCEPT
:output ACCEPT
-A input -s 0/0 -d 0/0 80 -p tcp -y -j ACCEPT
-A input -s 63.226.xxx.xxx -d 0/0 20 -p tcp -y -j ACCEPT
-A input -s 63.226.xxx.xxx -d 0/0 21 -p tcp -y -j ACCEPT
-A input -s 63.226.yyy.yyy -d 0/0 20 -p tcp -y -j ACCEPT
-A input -s 63.226.yyy.yyy -d 0/0 21 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 22 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 -i lo -j ACCEPT
-A input -s 63.226.zzz.zzz 53 -d 0/0 -p udp -j ACCEPT
-A input -s 0/0 -d 0/0 -p tcp -y -j REJECT
-A input -s 0/0 -d 0/0 -p udp -j REJECT
63.336.zzz.zzz is the IP of our router and 63.226.xxx.xxx and yyy are =
computers on the network that I want to have ftp access
Will the above do what I want it to do? Is what I want to do secure?
Regards,
Charlie
------=_NextPart_000_0015_01C1E08F.66DEB0E0
Content-Type: text/html;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Hi Iv'e created a set of firewall rules =
(my first=20
attempt, ipchains). I want to be able to serve webpages, access the =
server=20
remotley via ssh and allow 2 computers FTP access. I don't want anyone =
or=20
anythng else to go in or out of the server. This is running on RedHat=20
7.2
Here are the rules
:input ACCEPT
:forward =
ACCEPT
:output=20
ACCEPT
-A input -s 0/0 -d 0/0 80 -p tcp -y -j ACCEPT
-A input -s=20
63.226.xxx.xxx -d 0/0 20 -p tcp -y -j ACCEPT
-A input -s =
63.226.xxx.xxx -d=20
0/0 21 -p tcp -y -j ACCEPT
-A input -s 63.226.yyy.yyy -d 0/0 20 -p =
tcp -y -j=20
ACCEPT
-A input -s 63.226.yyy.yyy -d 0/0 21 -p tcp -y -j ACCEPT
-A =
input=20
-s 0/0 -d 0/0 22 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 -i lo -j=20
ACCEPT
-A input -s 63.226.zzz.zzz 53 -d 0/0 -p udp -j ACCEPT
-A =
input -s=20
0/0 -d 0/0 -p tcp -y -j REJECT
-A input -s 0/0 -d 0/0 -p udp -j=20
REJECT
63.336.zzz.zzz is the IP of our router =
and=20
63.226.xxx.xxx and yyy are computers on the network that I want to =
have ftp=20
access
Will the above do what I want it to do? =
Is what I=20
want to do secure?
Regards,
Charlie
------=_NextPart_000_0015_01C1E08F.66DEB0E0--