[lug] Firewall

[rotering at animalcules.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, Aug 06, 2001 at 07:52:58PM -0600, Chad Wasinger wrote:

> [...] I add an ACCEPT only from the source IP I want to 0.0.0.0/0
> and the port I want like port 80. and move it to the top. Now that
> works. So now I am trying to use FTP only from a certain IP range
> using the same ACCEPT line, but I try it from an IP that is not in
> my source range and I can still get an FTP login!!

It's a bit tough to tell what the problem is without seeing the actual
rules (use a bogus IP address for your side if you're concerned about
posting IP addresses).

Is it possible that you've set a default policy of ACCEPT?


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.6 and Gnu Privacy Guard <http://www.gnupg.org/>

iEYEARECAAYFAjtvXxYACgkQADBonRvUyoOh3QCgtndGg6ZJuQ4g8/+UQBNcy2NV
7bsAn2Vvl0IKv4UE0eCsoUZ2fWtvK3tC
=3srR
-----END PGP SIGNATURE-----