Shorewall users - Dec 2002 - Blacklist

--On Saturday, December 28, 2002 11:46 AM +1100 Jon Biddell
<jon@fl.net.au>
wrote:
>
> Assuming I can find put what RANGE the ISP is using, can I just blick
> the entire range ?
>
Jon,

Sorry for the blatant North Americanism in my earlier post; clearly ARIN 
isn''t the registry for Australia. I don''t know who your
registry is but if
it is ''foo.net'' then the proper query is:

whois -h whois.foo.net \> ! <id of evil ISP>

The ID of the Evil isp can be optained using:

dig www.<evil ISP>.au

This gives you the IP address of the ISP''s web server. Then

whois -h whois.foo.net <ip address> n

Here''s an example using ISP blarg.net and our North American Registry 
(arin.net):

[teastep@wookie amavisd-new-20021227]$ dig www.blarg.net

; <<>> DiG 9.2.1 <<>> www.blarg.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43157
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;www.blarg.net.                 IN      A

;; ANSWER SECTION:
www.blarg.net.          86400   IN      A       206.124.128.14

;; AUTHORITY SECTION:
blarg.net.              86400   IN      NS      guysmiley.blarg.net.
blarg.net.              86400   IN      NS      animal.blarg.net.

;; Query time: 35 msec
;; SERVER: 206.124.146.177#53(206.124.146.177)
;; WHEN: Fri Dec 27 17:45:27 2002
;; MSG SIZE  rcvd: 92

[teastep@wookie amavisd-new-20021227]$ whois -h whois.arin.net 
206.124.128.14 n
[whois.arin.net]

OrgName:    Blarg! Online Services
OrgID:      BOS

NetRange:   206.124.128.0 - 206.124.159.255
CIDR:       206.124.128.0/19
NetName:    BLARG-BLK
NetHandle:  NET-206-124-128-0-1
Parent:     NET-206-0-0-0-0
NetType:    Direct Allocation
NameServer: ANIMAL.BLARG.NET
NameServer: GUYSMILEY.BLARG.NET
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    1995-09-20
Updated:    1997-08-21

TechHandle: RML2-ARIN
TechName:   Lewis, R
TechPhone:  +1-425-401-9821
TechEmail:  marc@blarg.net

# ARIN Whois database, last updated 2002-12-26 20:00
# Enter ? for additional hints on searching ARIN''s Whois database.

[teastep@wookie amavisd-new-20021227]$ whois -h whois.arin.net \> ! BOS
[whois.arin.net]

OrgName: Blarg! Online Services
OrgID:   BOS
Address: P.O. Box 7385 Bellevue WA 98008-1385
Country: US
Comment:
RegDate: 1994-05-20
Updated: 1996-07-22

Resources Used By Organization:
Blarg! Online Services BLARG (NET-199-245-214-0-1) 199.245.214.0 - 
199.245.214.255
Blarg! Online Services BLARG-BLK (NET-206-124-128-0-1) 206.124.128.0 - 
206.124.159.255

# ARIN Whois database, last updated 2002-12-26 20:00
# Enter ? for additional hints on searching ARIN''s Whois database.

[teastep@wookie amavisd-new-20021227]$

So blarg.net has IP addresses 199.245.214.0-255 = 199.245.214.0/24 and 
206.124.128.0-159.255 = 206.124.128.0/19

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://shorewall.sf.net
Washington USA  \ teastep@shorewall.net

--On Friday, December 27, 2002 5:48 PM -0800 Tom Eastep 
<teastep@shorewall.net> wrote:
>
> Sorry for the blatant North Americanism in my earlier post; clearly ARIN
> isn''t the registry for Australia. I don''t know who your
registry is
The Asia-Pacific Registrar is apnic.net.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://shorewall.sf.net
Washington USA  \ teastep@shorewall.net

Dear all,

I use Shorewall-1.3.11a for 2 interface.
After I installed Shorewall, download the two-interface sample, un-tar
it (tar -zxvf two-interfaces.tgz) and copy the files to /etc/shorewall 

how can I do?
	+ Just allow some IP in the internet can access to  some
computer in local 

Thank for your help !

Le Van

--On Saturday, December 28, 2002 10:04 AM +0700 Techcom-Kythuat 
<tg301@hcm.vnn.vn> wrote:
>
> Dear all,
>
> I use Shorewall-1.3.11a for 2 interface.
> After I installed Shorewall, download the two-interface sample, un-tar
> it (tar -zxvf two-interfaces.tgz) and copy the files to /etc/shorewall
>
> how can I do?
> 	+ Just allow some IP in the internet can access to  some
> computer in local
If you want to give subnet S unlimited access to internal computer I:

DNAT	net:<address of S>	loc:<ip address of I>	all

For additional information, see 
http://shorewall.sf.net/Documentation.htm#Rules

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://shorewall.sf.net
Washington USA  \ teastep@shorewall.net