Shorewall users - Apr 2002 - Questions for verification

Hi,

I''ve got one DNS and one ntp-server, which query servers at the
internet.

are the followig rule corect, so _only_ thous two clients can use the ports?

ACCEPT local:172.17.20.40 net udp ntp
ACCEPT local:172.17.1.251 net tcp domain
ACCEPT local:172.17.1.251 net tcp domain


Thanks.

cu...
...Götz

- Götz Reinicke -------------------- mailto: greinick@filmakademie.de -
   IT Koordinator                                   Tel: 07141/969-420
   IT-OfficeNet Filmakademie Baden-Württemberg    Fax: 07141/969-55420
- Mathildenstr. 20, 71638 Ludwigsburg ----------- www.filmakademie.de -

Hi Götz

On Wed, 24 Apr 2002, Goetz Reinicke wrote:
> Hi,
> 
> I''ve got one DNS and one ntp-server, which query servers at the
internet.
> 
> are the followig rule corect, so _only_ thous two clients can use the
ports?
> 
> ACCEPT local:172.17.20.40 net udp ntp
> ACCEPT local:172.17.1.251 net tcp domain
> ACCEPT local:172.17.1.251 net tcp domain
> 
One of the last two rules should be ''udp'' -- other than that,
they look
ok.

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net