Koozali.org: home of the SME Server

Outgoing firewall...

Offline cool34000

  • *
  • 339
  • +0/-0
Outgoing firewall...
« on: September 04, 2006, 11:02:35 AM »
Is there an rpm to do some outgoing firewalling on SME 7 ?
I've searched a while and didn't find anything for SME...

Thanks !

Offline raem

  • *
  • 3,972
  • +4/-0
Re: Outgoing firewall...
« Reply #1 on: September 04, 2006, 02:09:28 PM »
cool34000

You can see what the default firewall does with

iptables -L

You can create custom templates to  manipulate firewall rules, see the Dev Guide.
Also see Chapter 15 Advanced customization principles

Managing the firewall
...

Offline cool34000

  • *
  • 339
  • +0/-0
Outgoing firewall...
« Reply #2 on: September 05, 2006, 12:45:16 AM »
I was looking for an easy way to do it on SME... Something like a panel or whatever but an interface :-D

Really need to read this manual !  :cry:

Offline raem

  • *
  • 3,972
  • +4/-0
Outgoing firewall...
« Reply #3 on: September 05, 2006, 03:49:52 AM »
cool34000

There was a masq manager panel for sme6. but I'm not aware of it having been updated to run on sme7, so therefore the suggestion to use the tools that already exist.

Did you read that Chapter section in the manual, it's not that hard to follow ?
You will then need to work out which template fragments to use. You can  read the existing fragments to see what each one does, as that will steer you in the right direction.
...

Offline cool34000

  • *
  • 339
  • +0/-0
Outgoing firewall...
« Reply #4 on: September 05, 2006, 04:23:06 PM »
I didn't read the manual for now, i will... Just have to find some time to !

I've already tested masq manager on SME 6, but as far as I remember, it was not an outgoing firewall but just another interface for managing the incoming firewall.

As firewalling all outbound traffic is a hard task (you never know how many ports you'll have to accept because some sites don't use conventionnal ports for example) it can't be done by anyone. I don't have the problem for me, I should get used to iptables and its syntax, but my customers shouldn't... That's why I was looking for an easy way to do it.


Anyway, thanks for your replys Ray, I got my answers... I'll have to wait ! And read the manual ! RTFM as some says :-D