pools of ports (instead of pools of ip addresses)

This is a discussion on pools of ports (instead of pools of ip addresses) within the IPFilter forums, part of the System Security and Security Related category; Greetings, I read about the *ippool* feature where the examples show how ippools can be defined as groups of ip ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 11-17-2007
David Stes
 
Posts: n/a
Default pools of ports (instead of pools of ip addresses)


Greetings,

I read about the *ippool* feature where the examples show how ippools can
be defined as groups of ip addresses.

Is it possible to use ippools for other objects as well ?

Like sets (pools) of tcp port numbers, for example.

If this is possible, is it please possible to give an example ?

It would be nice if a pool could be defined for example,

pool ports = { telnet, ftp, rexec, www }

so to speak and then in the /etc/ipf.conf file it could be possible to
accept traffic (or block traffic) to that pool of "ports", instead of
enumerating the ports in the ipf.conf file, it could just refer to the pool.

I am also thinking specifically of my application of RPC filtering.

I am trying to setup RPC call/response filtering, and I was thinking that
it could be nice to use the IPFILTER ippool feature to define pools of RPC
program numbers.

For example, for NetWorker, I could define the pool as the union of

portmapper and 390100:390120

This is a pool of 1 rpc program number (100000, portmapper) + a set of about
20 other rpc program numbers.


Is this possible , does it make sense to try to extend the ippool feature
for tcp / udp or rpc ports and not use pools only for ip addresses ?

Regards,
David STes

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 09:48 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0