> I want to access the internet from the private network.
> no firewalling required at this point. Just for testing.
This is trivial and pretty much spelled out for you in the HOWTO:
http://netfilter.samba.org/unreliable-guides/packet-filtering-HOWTO/packet-filtering-HOWTO.linuxdoc-5.html
Speaking of which, I was trying to get to the FAQ and HOWTO on
gnumonks.org, but I got FORBIDDENs all day (West Coast USA)
Sunday (and I guess still right now as I write this). Anyone
know what's up?
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
Is HTML allowed/encouraged here?
> > The usual reason is "don't confuse the user with too many buttons", and
> > "don't confuse us by making bug reports even more unreliable".
What is this "buttons" that people keep talking about? Just
curious, but it seems pretty pivotal to the discussion (I am not
an X user).
> On my home firewall i have installed a drop rule in the log chain
> for those packets. But from the security viewpoint i'm not happy
> with this. And i'm afraid that many people will install such
> "unsecure" rules to prevent very big log files.
Yep I'm a total newbie, but how can DROP be insecure? I always
figured that the packet getting ignored was the safest thing
ever. Indeed, when I have all incoming connections DROPped, it
doesn't even appear that there's a machine at that IP, does it?
-tom!
--
Tom Plunket tomas@fancy.org
PlayStation2/3D Studio geek
The best tagline is the one that you steal.
> no firewalling required at this point. Just for testing.
This is trivial and pretty much spelled out for you in the HOWTO:
http://netfilter.samba.org/unreliable-guides/packet-filtering-HOWTO/packet-filtering-HOWTO.linuxdoc-5.html
Speaking of which, I was trying to get to the FAQ and HOWTO on
gnumonks.org, but I got FORBIDDENs all day (West Coast USA)
Sunday (and I guess still right now as I write this). Anyone
know what's up?
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
Is HTML allowed/encouraged here?
> > The usual reason is "don't confuse the user with too many buttons", and
> > "don't confuse us by making bug reports even more unreliable".
What is this "buttons" that people keep talking about? Just
curious, but it seems pretty pivotal to the discussion (I am not
an X user).
> On my home firewall i have installed a drop rule in the log chain
> for those packets. But from the security viewpoint i'm not happy
> with this. And i'm afraid that many people will install such
> "unsecure" rules to prevent very big log files.
Yep I'm a total newbie, but how can DROP be insecure? I always
figured that the packet getting ignored was the safest thing
ever. Indeed, when I have all incoming connections DROPped, it
doesn't even appear that there's a machine at that IP, does it?
-tom!
--
Tom Plunket tomas@fancy.org
PlayStation2/3D Studio geek
The best tagline is the one that you steal.