Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 07 May 1998 16:05:16 -0700
From:      Ludwig Pummer <ludwigp@bigfoot.com>
To:        Keff Edwards <kedwards@sac3.com>, freebsd-questions@FreeBSD.ORG
Subject:   Re: Fire Wall
Message-ID:  <3.0.3.32.19980507160516.031a10d4@mail.plstn1.sfba.home.com>
In-Reply-To: <3.0.4.32.19980507141008.009084d0@192.168.1.1>

next in thread | previous in thread | raw e-mail | index | archive | help
At 02:10 PM 5/7/98 -0500, Keff Edwards wrote:
>I have 2 Network Cards in a FreeBSD machine. One with a valid IP on the
>internet and one with 192.168.1.x on my internal lan.  I am using the
>machine just as a mail server and telnet.  I found out I could telnet to my
>mail server and then telnet to my pc.  This is not good.  I want to be able
>to telnet to my pc and then telnet out to the network, and I want to be
>able to telnet into the Mail server but I donot want to TelNet thru the
>server to my lan.  How is this done and If you can give an example.

Enable firewalling in your kernel (try the FAQ or Handbook for how to do
this), then add to your rc.firewall
$fwcmd add deny tcp from <gateway's ip> to <other pc's ip> telnet

for more info, man ipfw and man ipfirewall

--Ludwig Pummer
ludwigp@bigfoot.com ludwigp@chipweb.ml.org
ICQ UIN: 692441   http://chipweb.home.ml.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3.0.3.32.19980507160516.031a10d4>