Marco Salimu
2009-Nov-03 07:29 UTC
Re: [Fwd: Re: Ref: Block local net to access internet but access DMZ webserver]
Thanks Tom, I have test the soln provided but not working. I have been thinking one thing that, the soln provide rejects local to net tcp www, But Local does not go directly to the net in steady in firewall there proxy server which forwards local www requests to the net. So what should i do on that context? pls help> Marco Salimu wrote: >> Thank You Tom, >> >> The soln you provided is working but what if i want to REJECT a network >> not a host ip.? > > Replace the host ip with the network in CIDR format (e.g., > 192.168.1.32/27). > > See http://www.shorewall.net/configuration_file_basics.htm#SOURCE-DEST > > -Tom > -- > Tom Eastep \ When I die, I want to go like my Grandfather who > Shoreline, \ died peacefully in his sleep. Not screaming like > Washington, USA \ all of the passengers in his car > http://shorewall.net \________________________________________________ > >-- with rgds Marco Salimu IT Manager [ P.o. Box 1546] Mob: +255 784 370294 Mob: +255 715 370294 Tel: +255 27 8218 Fax: +255 27 8273 Email: ******************************* marco@seda.or.tz smarcos2001@yahoo.com smarcos2001@hotmail.com marco_salim@wvi.org Marco.magnus@gmail.com ******************************** -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference
Laurent Caron (Phone)
2009-Nov-03 07:46 UTC
Re: [Fwd: Re: Ref: Block local net to access internet but access DMZ webserver]
Le 3 nov. 2009 à 08:29, "Marco Salimu" <marco@seda.or.tz> a écrit :> But Local does not go directly to the net in steady in firewall there > proxy server which forwards local www requests to the net.Hi The solution would then be to reconfigure (if possible) your proxy with proper ACLs. ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users