This is a discussion on pools of ports (instead of pools of ip addresses) within the IPFilter forums, part of the System Security and Security Related category; Greetings, I read about the *ippool* feature where the examples show how ippools can be defined as groups of ip ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Greetings, I read about the *ippool* feature where the examples show how ippools can be defined as groups of ip addresses. Is it possible to use ippools for other objects as well ? Like sets (pools) of tcp port numbers, for example. If this is possible, is it please possible to give an example ? It would be nice if a pool could be defined for example, pool ports = { telnet, ftp, rexec, www } so to speak and then in the /etc/ipf.conf file it could be possible to accept traffic (or block traffic) to that pool of "ports", instead of enumerating the ports in the ipf.conf file, it could just refer to the pool. I am also thinking specifically of my application of RPC filtering. I am trying to setup RPC call/response filtering, and I was thinking that it could be nice to use the IPFILTER ippool feature to define pools of RPC program numbers. For example, for NetWorker, I could define the pool as the union of portmapper and 390100:390120 This is a pool of 1 rpc program number (100000, portmapper) + a set of about 20 other rpc program numbers. Is this possible , does it make sense to try to extend the ippool feature for tcp / udp or rpc ports and not use pools only for ip addresses ? Regards, David STes |
![]() |
| Thread Tools | |
| Display Modes | |
|
|