Re: Blokowanie usera [FreeBSD]

Article View: pl.comp.os.bsd

Article #167

#167

From: Konrad Rzadzinski
Date: Mon, 05 Apr 2004 17:18

34 lines
2291 bytes

Dnia Mon, 5 Apr 2004 19:10:01 +0200, Jacek Maliszewski
<jacek-...@usuwaj-malisz.eu.org> tako rzekł:

:> W takim razie czy to zadziała ?
:> # Te komputery maja dostep tylko do SMTP, POP3
:> block in quick on xl1 from 192.168.1.31/32 to any
:> block in quick on xl1 from 192.168.1.32/32 to any
:> pass in log quick on xl1 proto tcp from 192.168.1.31/32 to any port = 25
: keep state
:> pass in log quick on xl1 proto tcp from 192.168.1.32/32 to any port = 25
: keep state
:> pass in log quick on xl1 proto tcp from 192.168.1.31/32 to any port = 110
: keep state
:> pass in log quick on xl1 proto tcp from 192.168.1.32/32 to any port = 110
: keep state
:>
:  W pierwsych dwoch linijkach wyrzucilem na koncu ...... port

Mhm.
Zrób raczej tak:
block in on xl1 from ...
pass in log quick on xl1 from ...

: Poniewaz te dwa komputery otrzymuja IP z DHCP czy potrzeba odblokowac do
: tego jakis dodatkowy port ?

68, tcp/udp.
Zresztą, to zależy, gdzie jest DHCP (przed, czy za xl1).

-- 
Konrad
http://amba.matrix.pl/~kurak/
'W życiu nie liczą się tylko ciało i muskuły - ważny jest jeszcze fryz.' -
Johnny Bravo

Technical Details

Message-ID: <slrnc7357p.1b78.k.rzadzinski@vpn-bema.matrix.pl>

Path:

mbox-mo1.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsfeed.tpinternet.pl!news.mcnet.pl!not-for-mail

References:

<c3fj8h$il6$1@news.onet.pl> <c3korl.1cg.1.aah@simple.mid.net> <1080485379.806925@hedgehog.axelspringer.com.pl> <c46vor$leb$1@news.onet.pl> <slrnc6qumd.14l4.k.rzadzinski@vpn-bema.matrix.pl> <c4s301$p94$1@news.onet.pl> <c4s3nm$j57$1@news.onet.pl>

Show Full Headers

Complete Article Headers

Path: mbox-mo1.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsfeed.tpinternet.pl!news.mcnet.pl!not-for-mail
From: Konrad Rzadzinski <k.rzad...@amba.matrix.pl>
Newsgroups: pl.comp.os.bsd,pl.comp.os.freebsd
Subject: Re: Blokowanie usera [FreeBSD]
Followup-To: pl.comp.os.bsd
Date: Mon, 5 Apr 2004 17:18:49 +0000 (UTC)
Organization: MCNET News Server
Lines: 34
Message-ID: <slrnc7357p.1b78.k.rzadzinski@vpn-bema.matrix.pl>
References: <c3fj8h$il6$1@news.onet.pl> <c3korl.1cg.1.aah@simple.mid.net> <1080485379.806925@hedgehog.axelspringer.com.pl> <c46vor$leb$1@news.onet.pl> <slrnc6qumd.14l4.k.rzadzinski@vpn-bema.matrix.pl> <c4s301$p94$1@news.onet.pl> <c4s3nm$j57$1@news.onet.pl>
NNTP-Posting-Host: vpn-bema.matrix.pl
Mime-Version: 1.0
X-Trace: nettle.mcnet.pl 1081185529 26074 193.0.236.131 (5 Apr 2004 17:18:49 GMT)
X-Complaints-To: use...@mcnet.pl
NNTP-Posting-Date: Mon, 5 Apr 2004 17:18:49 +0000 (UTC)
User-Agent: slrn/0.9.8.0 (FreeBSD)
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reply to Parent Message