[Shorewall-users] Webmin

Gonzalo Servat
Tue, 26 Aug 2003 15:52:16 -0000

On 26/08/2003 7:38 PM -0300, Eurico Vaz Junior wrote:

> I think that this is the problem... my firewall
> machine is a proxy too. Then all requests from local
> zone go trough the proxy, and the proxy can access the
> port 10000.
> Can i block this by some rule or only in the proxy
> (Squid) configuration?

Well, Shorewall uses iptables which uses netfilter which is a stateful
packet filtering firewall so it doesn''t look into the upper layers
where
this sort of information would be kept. You would have to tell Squid to
block it.

Albeit OT, you just change the ACLs in squid.conf. By default it allows
ports 80,21,443,563,etc,etc and 1025-65535 where port "10000" would
fall
into. You can either explicitly deny access to this port, or exclude port
10000 from this default range.

Good luck.

Best regards,
Gonzalo