Topic: locking down internal -> external access

[Dave]

Hi everybody, (hi Dr Nick)

I'm after some pointers for restricting my users to only a few services (www, telnet, ftp). As e-smith ships anyone on the internal network has full access to the internet.

I have added ipchains to the output chain and changed the
default output policy to deny. This works for www and telnet
but breaks ftp. Any ideas?

Thanks,
Dave.

[Graeme Robinson]

have you searched the phorums - I think this issue has been delt with.