Shorewall users - Aug 2005 - Policy Question

Hi,

Two doubts:

1. If in the Policy file i put:

    loc    net    ACCEPT
    net    loc    ACCEPT

With this configuration, all trafic from Internet to the local networks, and
from the local network to Internet is accepted.
In this situation I'' don''t make filtering. It is correct?

I only need NAT and route, not filtering.

2. It is correct make SNAT only to one private IP not to a subnet?

masq
--------

eth0    192.168.1.5    200.58.129.10


Thanks,

Andrés

On 17 Aug 2005 at 12:40, Charrua wrote:
> 
> Hi,
> 
> Two doubts:
In english the word "doubts" usually implys disbelief.
I think the word you wanted was "questions"
(I say this not to criticise, but to be helpful).
> 1. If in the Policy file i put:
> 
>  loc net ACCEPT
>  net loc ACCEPT
> 
> Withthisconfiguration, all trafic from Internet to the local 
> networks, andfrom the local network to Internetis accepted.
> In this situation I'' don''t make filtering. It is correct?
> 
> I only need NAT and route,not filtering.
In this case your network is un-filterd and wide open
and you will have only NAT, plus any other rules
you enter for specific routing.

If that is REALLY what you want then for your purposes
it might be considered correct.


-- 
______________________________________
John Andersen
NORCOM / Juneau, Alaska
http://www.screenio.com/
(907) 790-3386

.


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing
& QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf