Shorewall users - Aug 2004 - Blacklist and rules - order of processing

I was wondering if i could stick a certain ip in the blocklist, but at 
the same time have an allow rule for http in the rules section.  In 
other words i would like to block pretty much all access from a certain 
internet address except for http from the internal network.  So does the 
rules file get parsed before the blacklist in the firewall to make this 
possible?

davenews@thebarnums.net wrote:
> I was wondering if i could stick a certain ip in the blocklist, but at
> the same time have an allow rule for http in the rules section.  In
> other words i would like to block pretty much all access from a certain
> internet address except for http from the internal network.  So does the
> rules file get parsed before the blacklist in the firewall to make this
> possible?
You aren''t talking about blacklisting, you''re talking about
very
restrictive access.  You should define a rule (in the order you
prefer) which blocks access for that IP after your rule to allow HTTP
access for that IP.

-- 
Paul Gear, Manager IT Operations, Redlands College
38 Anson Road, Wellington Point 4160, Australia
(Please send attachments in portable formats such as PDF, HTML, or
OpenOffice.)
-- 
The information contained in this message is copyright by Redlands
College.  Any use for direct sales or marketing purposes is expressly
forbidden.  This message does not represent the views of Redlands
College.