Pf igen igen

From: Tue Topholm (none@tt--device.dk.lh.bsd-dk.dk)
Date: Fri 05 Nov 2004 - 15:28:07 CET

Next message: Claus Guttesen: "Re: Pf igen igen"
Previous message: Claus Guttesen: "Re: pf og pass"
Next in thread: Claus Guttesen: "Re: Pf igen igen"
Reply: Claus Guttesen: "Re: Pf igen igen"
Reply: Jesper Louis Andersen: "Re: Pf igen igen"
Reply: Michael Knudsen: "Re: Pf igen igen"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

From: "Tue Topholm" <none@tt--device.dk.lh.bsd-dk.dk>
To: <none@bsd-dk--bsd-dk.dk.lh.bsd-dk.dk>
Subject: Pf igen igen
Date: Fri, 5 Nov 2004 15:28:07 +0100

Jeg fulgte Michael Knudsens anbefaling, men det virker stadigvæk ik:

Her er mine regler:

#Servers ip'er
WIN = "1.2.3.4"
Linux = "2.3.4.5"

#Samling af servers ip'er i grupper
alle_ssh = "{" $Linux "}"
alle_vnc = "{" $WIN "}"
alle_www = "{" $WIN $Linux "}"
#Bloker alt
block log all

#SSH
pass in proto tcp from any to $alle_ssh port ssh flags S/SA modulate state

#VNC
pass in proto tcp from any to $alle_vnc port 5900 flags S/SA modulate state

#WWW
pass in proto tcp from any to $alle_www port http flags S/SA modulate state

Men det virker ikke hvorfor ik det.

/Tue

Next message: Claus Guttesen: "Re: Pf igen igen"
Previous message: Claus Guttesen: "Re: pf og pass"
Next in thread: Claus Guttesen: "Re: Pf igen igen"
Reply: Claus Guttesen: "Re: Pf igen igen"
Reply: Jesper Louis Andersen: "Re: Pf igen igen"
Reply: Michael Knudsen: "Re: Pf igen igen"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

This archive was generated by hypermail 2b30 : Wed 15 Nov 2006 - 18:24:46 CET