Koozali.org: home of the SME Server

IPTABLES in SME 6.0

draxx

IPTABLES in SME 6.0
« on: September 28, 2004, 12:34:07 PM »
Hi All,
Ive been giving myself a hell of headache trying to come to grips with IPTABLES. With ipchains one could generally state:
sourecIP destinationIP port DENY/ACCEPT
I cannot find in any the documentations how to implement this (i.e: destination and source)in iptables.
Does anyone out there have some docs or advice on how to configure the iptables in SME 6.0???

Aargh!
Thanx

Offline briank

  • ****
  • 146
  • +0/-0
IPTABLES in SME 6.0
« Reply #1 on: September 28, 2004, 01:21:11 PM »
Search Google for the iptables Howto but this might help explain the differences
http://www.linuxguruz.com/iptables/howto/iptables-HOWTO-7.html
Regards
Brian

Offline gzartman

  • *
  • 306
  • +0/-0
    • LEI Engineering & Surveying
IPTABLES in SME 6.0
« Reply #2 on: September 28, 2004, 06:36:33 PM »
Or better yet, give this contrib a try:

http://no.longer.valid/mylinks/singlelink.php?cid=123&lid=372

I've not tried this contrib, it does look like it will simplify what you are trying to do.

Greg Zartman
----
Greg J. Zartman
LEI Engineering & Surveying

SME user and community member since 2000.

p_bruin

IPTABLES in SME 6.0
« Reply #3 on: October 03, 2004, 10:04:12 PM »
No, the rpm just gives you the possibility to say
PORT DENY/ACCEPT
I would like to expand this rule with the ability to accept a port only from a certain IP.
I have been looking all over to find this, but so far, no luck.
Does anyone have an idea?????

Offline arne

  • *****
  • 1,116
  • +0/-4
IPTABLES in SME 6.0
« Reply #4 on: October 07, 2004, 01:09:13 AM »
Its not more difficult with the iptables, but you don't say what kind of configuration you are running.

If it's a server gateway a mod of the firewall will very easy destroy the functionality of the existing firewall.

If it's a server only installation without a firewall, it's not very difficult to make a new firewall konfiguration with such a function.

(Actually it can be modified into the gateway seup also if its just to drop some source ip's)
......