Shorewall users - Jan 2003 - config problem

hi have a little problem of configuration

I have a network with a server (192.168.0.1) and other pc one is
192.168.0.20

i want to reject all output from 192.168.0.20 for port 4000 (tcp and
udp)

i want accept incoming packet on port 4000 but reject outgoing packet on
port 4000

so could you give me a solution please ?

thank you

PS : I hope you undersatnd waht I want because im frecnh and my english
is not perfect.

thank

stephane

On 19 Jan 2003 18:07:18 +0100 stephane salettes
<stephane.salettes@aidelinux.org> wrote....
> hi have a little problem of configuration
	Not knowing what zones you have defined, it''s a bit hard, but assuming
you have a "standard" setup, you would need the following..
 
> I have a network with a server (192.168.0.1) and other pc one is
> 192.168.0.20
>
> i want to reject all output from 192.168.0.20 for port 4000 (tcp and
> udp)
REJECT	loc:192.168.0.20	net	tcp	4000
REJECT	loc:192.168.0.20	net	udp	4000
> i want accept incoming packet on port 4000 but reject outgoing packet on
> port 4000
	Will need more information about this before I can help.. If you posted
your rules and zones file, that would be a good start... The other thing
is, you don''t state where you want to accept these packets at... Or,
are
you wanting to forward them from the Internet to an internal machine?
> so could you give me a solution please ?
	If you provide more information, sure ;)

--- 
Homer Parker                  /"\ ASCII Ribbon Campaign
                              \ / No HTML/RTF in email
http://www.homershut.net       x  No Word docs in email
telnet://bbs.homershut.net    / \ Respect for open standards

This e-mail message is 100% Microsoft free!

WARNING: THIS ACCOUNT BELONGS TO A RABID
ANTI-SPAMMER NET-NAZI DOT-COMMUNIST!!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://mail.shorewall.net/pipermail/shorewall-users/attachments/20030119/b80b9987/attachment.bin

--On Sunday, January 19, 2003 6:07 PM +0100 stephane salettes 
<stephane.salettes@aidelinux.org> wrote:
> hi have a little problem of configuration
>
> I have a network with a server (192.168.0.1) and other pc one is
> 192.168.0.20
>
> i want to reject all output from 192.168.0.20 for port 4000 (tcp and
> udp)
/etc/shorewall/rules:

REJECT	loc:192.168.0.20	all	tcp	4000
REJECT	loc:192.168.0.20	all	udp	4000
	
>
> i want accept incoming packet on port 4000 but reject outgoing packet on
> port 4000
>From where? The internet? If so:
DNAT	net	loc:192.168.0.20	tcp	4000
DNAT	net	loc:192.168.0.20	udp	4000

-Tom
--
Tom Eastep   \ Shorewall - iptables made easy
AIM: teastep  \ http://www.shorewall.net
ICQ: #60745924 \ teastep@shorewall.net