Shorewall users - Jul 2002 - Trouble in outoging ftp or telnet.

Dear All,

I am unable to telnet or ftp from my firewall to my itneral server &
router. Is there any rules to be add?


Thanking you all,


Kiran Mistry.

----- Original Message ----- 
From: "K Mistry" <kk@gujaratpetro.com>
> 
> I am unable to telnet or ftp from my firewall to my itneral server &
> router. Is there any rules to be add?
... in the ./rules file:
ACCEPT    fw    loc    tcp    telnet,ftp,ftp-data

for open all services from fw to loc, add this rule into ./policy file:
fw    loc    ACCEPT

-------
Dario Lesca (d.lesca@ivrea.osra.it)

K Mistry wrote:
> Dear All,
>
> I am unable to telnet or ftp from my firewall to my itneral server &
> router. Is there any rules to be add?
Kiran,

The rules that Dario has just posted will work if your zones use
default names (incidentally, there should be no need for the ftp-data
rule if you are using connection tracking, which you should be), and if
the server & router you wish to access are in the loc zone.

However, it is important to remember that there is no "standard"
configuration in Shorewall.  It does not provide any default rules for
services between zones.  You have to define everything you want to
use.  So the general answer to "Are there any rules to be added?" is
"That depends what''s there already."

Also, there is the issue of whether you _should_ allow telnet & ftp
from your firewall to your internal machines.  Is that something you
want to encourage?

Regards,
Paul
http://paulgear.webhop.net