*BSD News Article 70865


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.mira.net.au!inquo!in-news.erinet.com!imci5!pull-feed.internetmci.com!news.internetMCI.com!newsfeed.internetmci.com!howland.reston.ans.net!Germany.EU.net!Dortmund.Germany.EU.net!interface-business.de!usenet
From: j@ida.interface-business.de (J Wunsch)
Newsgroups: comp.unix.bsd.bsdi.misc
Subject: Re: ppp restricted account
Date: 12 Jun 1996 13:55:39 GMT
Organization: interface business GmbH, Dresden
Lines: 15
Message-ID: <4pmi8r$air@innocence.interface-business.de>
References: <4pku8s$1vv@gateway.icontech.com> <4pl5mh$mqo@moon.igcom.net>
Reply-To: joerg_wunsch@interface-business.de (Joerg Wunsch)
NNTP-Posting-Host: ida.interface-business.de
X-Newsreader: knews 0.9.6
X-Phone: +49-351-31809-14
X-Fax: +49-351-3361187
X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F  93 21 E0 7D F9 12 D6 4E

david@terra.igcom.net (David B. Bauman) wrote:

> Forget about apache, your problem lies on your PPP server.
> If you are using the BSDI BSD/OS PPP server, I do not believe that
> you can do what you want which is called "packet filtering".

You don't need fancy packet filtering.  All you need is to not enable
packet forwarding.  As long as this server doesn't route packets from
its ppp interfaces to the ethernet (or whatever goes out to the
Internet) interface, no direct communication path can be established.

-- 
J"org Wunsch					       Unix support engineer
joerg_wunsch@interface-business.de       http://www.interface-business.de/~j