difference on syntax

This is a discussion on difference on syntax within the IPFilter forums, part of the System Security and Security Related category; hi. 1) What is the difference between : (fxp0 is my wan interface and 192.168.0.1/24 is my ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 10-10-2004
Nicolas Montauban
 
Posts: n/a
Default difference on syntax

hi.

1) What is the difference between :

(fxp0 is my wan interface and 192.168.0.1/24 is my lan network)

pass in on fxp0 proto tcp/udp from any to any keep state
pass in on fxp0 proto icmp from any to any keep state

and

pass in quick proto icmp from 192.168.0.0/24 to any keep state
pass in quick proto tcp from 192.168.0.0/24 to any keep state
pass in quick proto udp from 192.168.0.0/24 to any keep state

It's just a question of precision ?

2) Other question.
I see

pass in quick proto icmp from 192.168.0.0/24 to any keep state
pass in quick proto tcp from 192.168.0.0/24 to any keep state
pass in quick proto udp from 192.168.0.0/24 to any keep state
pass in quick from 192.168.0.0/24 to any

or

map tun0 from 192.168.1.0/24 to 0.0.0.0/0 -> xx.xx.xx.x/32 portmap
tcp/udp auto
map tun0 from 192.168.1.0/24 to 0.0.0.0/0 -> xx.xx.xx.x/32

What is the interest to put this line :
pass in quick from 192.168.0.0/24 to any
or
map tun0 from 192.168.1.0/24 to 0.0.0.0/0 -> xx.xx.xx.x/32

3) Time restrict
I am surprised to see that with Iptables:
$IPTABLES -A INPUT -s 192.168.0.0/24 -m state --state NEW -m time
--timestart 08:00 --timestop 12:00 --days Sun,Mon,Tue,Wed,Thu,Fri,Sat -j
ACCEPT
$IPTABLES -A OUTPUT -s 192.168.0.0/24 -m state --state NEW -m time
--timestart 08:00 --timestop 12:00 --days Sun,Mon,Tue,Wed,Thu,Fri,Sat -j
ACCEPT
$IPTABLES -A FORWARD -s 192.168.0.0/24 -m state --state NEW -m time
--timestart 08:00 --timestop 12:00 --days Sun,Mon,Tue,Wed,Thu,Fri,Sat -j
ACCEPT


It's possible to do that with ipfilter without use squid ?

Nicolas M.

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 06:52 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0