Re: True whitelist

On Tuesday 02 February 2010 07:37:28 WJP wrote:
> Hello!
> 
> I have seen some discussion around this but no clear solution:
> 
> Is there a way to tell Firehol to do NO filtering (including "NEW TCP w/o
> SYN") to/from an IP/range?
> I am troubleshooting a specific connectivity issue and am seeing some of
> this in the logs:
> 
> NEW TCP w/o SYN:'IN=eth1 OUT= MAC=<mac> SRC=<src> DST=<dst> LEN=89
>  TOS=0x00 PREC=0x00 TTL=50 ID=33540 DF PROTO=TCP SPT=51672 DPT=443
>  WINDOW=33285 RES=0x00 ACK PSH URGP=0
> 
> I'd like to stop all filtering on all ports on all protocols between
>  <src> and <dst>. Is there a way to achieve this with Firehol?

I don't know exactly what command you need, but if it's doable with 
iptables, it should be doable with firehol's "iptables" command, which 
basically just passes on it's arguments to the real iptables.

------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com

_______________________________________________
Firehol-support mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/firehol-support

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEABECAAYFAktoddMACgkQ8KmKTEzW49IZDQCgikgjARnp/9IW82sJVnATvwew
p7kAnj7fq5kbnNBhxcKqE+Z9DVWKPbVK
=RnrB
-----END PGP SIGNATURE-----