*BSD News Article 60103


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.mel.connect.com.au!munnari.OZ.AU!news.ecn.uoknor.edu!paladin.american.edu!gatech!news.mathworks.com!fu-berlin.de!zib-berlin.de!irz401!uriah.heep!news
From: j@uriah.heep.sax.de (J Wunsch)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: When's the next SNAP Release?
Date: 19 Jan 1996 22:36:26 GMT
Organization: Private BSD site, Dresden
Lines: 18
Message-ID: <4dp6da$4iv@uriah.heep.sax.de>
References: <Pine.HPP.3.91.960115145938.9486A-100000@ocean.fit.qut.edu.au> <4dhk9b$r9@uriah.heep.sax.de> <Pine.HPP.3.91.960118161958.5024C-100000@ocean.fit.qut.edu.au>
Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch)
NNTP-Posting-Host: localhost.heep.sax.de
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Newsreader: knews 0.9.3

Brad MacKenzie <brad@fit.qut.edu.au> writes:

> ...  By IP PORT Filtering I would like to know if
> it will be possible to stop specific IP/port combinations at the 
> FreeBSD-router. So that, say host www.xxx.yyy.zzz can not use telnet but can
> ftp to hosts outside the subnet, while another authorized host may use both
> services (ie. filtering on both IP address and PORT). 

That's an add-on that used to be provided by some firewall code.  It's
already there in 2.0.5 and 2.1.  Don't ask me for details, i do hate
firewalls, and prefer using the regular Unix access control instead.

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)