Koozali.org: home of the SME Server

Legacy Forums => Suggestions => Topic started by: uniQ on January 01, 2004, 10:04:14 AM

Title: IPtables
Post by: uniQ on January 01, 2004, 10:04:14 AM

How about a server-manager pane for IPtables? or... when a svr like SSH is configured to not accept connections from the Inet, a iptable automatically drops into place to shield it from passing scanners?

Thanks for listening!

         -uniQ

Title: Re: IPtables
Post by: Charlie Brady on January 05, 2004, 01:09:45 AM

uniQ wrote:

> How about a server-manager pane for IPtables?

There's no need. See below.

> or... when a
> svr like SSH is configured to not accept connections from the
> Inet, a iptable automatically drops into place to shield it
> from passing scanners?

That's exactly what happens currently.  IOW, the iptables rules are set by policy (services a & b enabled, others disabled), so there's no need to allow the admin to explicitly set rules(*).

Charlie

(*) But they still can via custom templates if they feel they need to.