[Shorewall-users] newbie question

Wai Yung
Sun, 13 Oct 2002 14:04:38 -0000

Hi,

I tried to modify /etc/shorewall/policy file,
putting a line

loc	fw	ACCEPT

there, also added a "loc" zone in /etc/shorewall/zones
as well.  But it didn''t work.  One of the things I don''t
understand is do I need to specify another interface in
/etc/shorewall/interfaces.  It already has one like this:

net	eth0	detect

I tried to add another line specifying the loc zone with
eth0, but that didn''t work either.

wy


On Sun, 13 Oct 2002, Tarax wrote:
;P~Hi,
;P~
;P~I run shorewall on mdk 9.0 (Cooker) too, but AFAIR packages don''t
use last
;P~shorewall version.
;P~I set it up using 1.3.9a, without so much problems.
;P~You seem to have 2 zones, fw & loc, so:
;P~	- either open each needed ports in /etc/shorewall/rules from loc->fw,
refer
;P~to /etc/services to find wich ports you need to open)
;P~	- or open all ports from loc->fw in /etc/shorewall/policy.
;P~
;P~Caution: this are newbie advices, I strongly recommend a free dive in
Tom''s
;P~excellent documentation !
;P~
;P~Jérémie
;P~
;P~Le Dimanche 13 Octobre 2002 15:18, Wai Yung a écrit :
;P~> Hi,
;P~>
;P~> I''m a newbie when it comes to firewalls and Linux.
I''ve been having
;P~> a difficult time trying to configure Shorewall on Mandrake 9.0.
;P~> Here''s my problem:
;P~>
;P~> - I have a broadband connection thru cable and the cable modem is
;P~>   connected to a Linksys cable/dsl router (befsr41).  I have a couple
;P~>   of Windows machines and a Mandrake 9.0 box connected to the router.
;P~>   They each get a static ip address. (the 192.168.1.xxx kind)
;P~>
;P~> - Mandrake 9 comes with Shorewall preinstalled.  But I couldn''t
get
;P~>   it to allow my windows machines to talk to servers running on the
;P~>   Linux box. (samba, apache, ssh, etc)
;P~>
;P~> - Basically what I want is to have the firewall *not* blocking any
;P~>   connections from my local machines.  How do I set it up?
;P~>
;P~> I looked thru the documentations on the web site, and I still
don''t
;P~> have a clue and couldn''t get it to work.  Any help is
appreciated.
;P~> Thanks.
;P~>
;P~> wy
;P~
;P~

--
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GE/FA/IT/O d-(---) s+:+(-:-) a-- C+++(++)>$ U>$ P+>$ L(+) E---(----)
W++>$ N+ o(+) K- w(+) O? M- V-- PS++(+)@ PE+(-)@ Y+ PGP t 5? X++(+) R?
tv(+) b+(++) Dl D- G e++ h! !r !z
------END GEEK CODE BLOCK------