Port forwarding and blocking custom DNS from clients help

Pedro Guizeline <[email protected]> Thu, 14 Mar 2019 20:17:39 -0300
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <CAJAbs-ninW-j-1WM9GSTAJfL7b_wck1Qxt-WRaTHw0QNP0gT1A@mail.gmail.com>
SGkhIEZpcnN0IGxldCBtZSB0aGFuayBldmVyeW9uZSBmb3IgdGhpcyBhbWF6aW5nIHRvb2whIFlv
dSBndXlzIHJlYWxseQpzYXZlZCBteSBsaWZlLCBJIHdhcyBnb2luZyBjb21wbGV0ZWx5IGluc2Fu
ZSB3aXRoIHBsYWluIGlwdGFibGVzIQoKSSdtIHJ1bm5pbmcgYSBEZWJpYW4gOSByb3V0ZXIsIHdp
dGggMyBWTEFOUywgREhDUCBzZXJ2ZXIgYW5kIEROUyBjYWNoZQpkbnNjcnlwdC1wcm94eTIuIEkg
d2FzIGFibGUgdG8gc2V0dXAgdGhlIHdob2xlIGZpcmV3YWxsIHJ1bGVzIGluIHVuZGVyIDVtaW4K
YW5kIGV2ZXJ5dGhpbmcgc3RhcnRlZCB3b3JraW5nIHBlcmZlY3RseSEgQnV0IG5vdyBJJ20gdHJ5
aW5nIHRvIGFjaGlldmUgMgpsYXN0IHRoaW5ncyBmb3IgbXkgc2V0dXA6CgoxKSBQb3J0IGZvcndh
cmRpbmcgbXkgaW50ZXJuZXQgZmFjaW5nIHBvcnQgNDI0MiB0byBwb3J0IDIyIHNvIEkgY2FuIGFj
Y2VzcwpteSByb3V0ZXIgdmlhIFNTSCByZW1vdGVseSAoSSBrbm93IHRoaXMgaXMgZGFuZ2Vyb3Vz
IGJ1dCBteSBzZXJ2ZXIgb25seQphY2NlcHRzIFNTSCBrZXkgYXV0aCkKMikgQmxvY2sgYWxsIG15
IHVzZXJzLCBldmVyeW9uZSBidXQgdGhlIHJvdXRlciwgZnJvbSB1c2luZyBjdXN0b20gRE5TCnJl
c29sdmVycyBvbiB0aGVpciBkZXZpY2VzLCB1c2luZyA4LjguOC44LCAxLjEuMS4xIGFuZCBzbyBv
bi4gSSB3YW50IHRvCmZvcmNlIHRoZSB1c2VycyB0byB1c2UgbXkgRE5TIHNlcnZlciBwcm92aWRl
ZCB2aWEgREhDUC4KCkhlcmUncyBteSBjdXJyZW50IGNvbmZpZ3VyYXRpb246Cgp2ZXJzaW9uIDYK
CldBTj1wcHAwCkxBTj1lbnAzczAKVkxBTjEwPWVucDNzMC4xMApWTEFOMjA9ZW5wM3MwLjIwClZM
QU4zMD1lbnAzczAuMzAKCkxBTl9ORVQ9IjE5Mi4xNjguMS4wLzI0IgpWTEFOMTBfTkVUPSIxOTIu
MTY4LjEwLjAvMjQiClZMQU4yMF9ORVQ9IjE5Mi4xNjguMjAuMC8yNCIKVkxBTjMwX05FVD0iMTky
LjE2OC4zMC4wLzI0IgoKdGNwbXNzIGF1dG8gIiR7V0FOfSIKCiNkbmF0NCB0byAxOTIuMTY4LjEu
MToyMiBpbmZhY2UgJHtXQU59IHByb3RvIHRjcCBkcG9ydCA0MjQyCgppbnRlcmZhY2U0ICR7V0FO
fSBpbnRlcm5ldCBzcmMgbm90ICIke0xBTl9ORVR9ICR7VU5ST1VUQUJMRV9JUFN9IgogICAgcHJv
dGVjdGlvbiBzdHJvbmcgMTAvc2VjIDEwCiAgICBzZXJ2ZXIgaWNtcCBhY2NlcHQKICAgIHNlcnZl
ciBpZGVudCByZWplY3Qgd2l0aCB0Y3AtcmVzZXQKICAgIGNsaWVudCBhbGwgYWNjZXB0CgppbnRl
cmZhY2U0ICR7TEFOfSBob21lIHNyYyAiJHtMQU5fTkVUfSIKICAgIHBvbGljeSByZWplY3QKICAg
IHNlcnZlciAiaWNtcCBzc2ggZGhjcCBkbnMiIGFjY2VwdAogICAgY2xpZW50IGljbXAgYWNjZXB0
CiAgICAjY2xpZW50IGRucyByZWplY3QgZHN0IDAuMC4wLjAvMCBsb2cKCmludGVyZmFjZTQgJHtW
TEFOMTB9IHByaXZhdGUgc3JjICIke1ZMQU4xMF9ORVR9IgogICAgcG9saWN5IHJlamVjdAogICAg
c2VydmVyICJpY21wIHNzaCBkaGNwIGRucyIgYWNjZXB0CiAgICBjbGllbnQgaWNtcCBhY2NlcHQK
ICAgICNjbGllbnQgZG5zIHJlamVjdCBkc3QgMC4wLjAuMC8wIGxvZwoKaW50ZXJmYWNlNCAke1ZM
QU4yMH0gZ3Vlc3Qgc3JjICIke1ZMQU4yMF9ORVR9IgogICAgcG9saWN5IHJlamVjdAogICAgc2Vy
dmVyICJpY21wIHNzaCBkaGNwIGRucyIgYWNjZXB0CiAgICBjbGllbnQgaWNtcCBhY2NlcHQKICAg
ICNjbGllbnQgZG5zIHJlamVjdCBkc3QgMC4wLjAuMC8wIGxvZwoKaW50ZXJmYWNlNCAke1ZMQU4z
MH0gaW90IHNyYyAiJHtWTEFOMzBfTkVUfSIKICAgIHBvbGljeSByZWplY3QKICAgIHNlcnZlciAi
aWNtcCBzc2ggZGhjcCBkbnMiIGFjY2VwdAogICAgY2xpZW50IGljbXAgYWNjZXB0CiAgICAjY2xp
ZW50IGRucyByZWplY3QgZHN0IDAuMC4wLjAvMCBsb2cKCnJvdXRlcjQgaW50ZXJuZXQyaG9tZSBp
bmZhY2UgJHtXQU59IG91dGZhY2UgJHtMQU59CiAgICBwcm90ZWN0aW9uIHN0cm9uZyAxMC9zZWMg
MTAKICAgIG1hc3F1ZXJhZGUgcmV2ZXJzZQogICAgY2xpZW50IGFsbCBhY2NlcHQKICAgIHNlcnZl
ciBpZGVudCByZWplY3Qgd2l0aCB0Y3AtcmVzZXQKCnJvdXRlcjQgaG9tZTJpbnRlcm5ldCBpbmZh
Y2UgJHtMQU59IG91dGZhY2UgJHtXQU59CiAgICBtYXNxdWVyYWRlCiAgICByb3V0ZSBhbGwgYWNj
ZXB0Cgpyb3V0ZXI0IHByaXZhdGUyaW50ZXJuZXQgaW5mYWNlICR7VkxBTjEwfSBvdXRmYWNlICR7
V0FOfQogICAgbWFzcXVlcmFkZQogICAgcm91dGUgYWxsIGFjY2VwdAoKcm91dGVyNCBndWVzdDJp
bnRlcm5ldCBpbmZhY2UgJHtWTEFOMjB9IG91dGZhY2UgJHtXQU59CiAgICBtYXNxdWVyYWRlCiAg
ICByb3V0ZSBhbGwgYWNjZXB0Cgpyb3V0ZXI0IGlvdDJpbnRlcm5ldCBpbmZhY2UgJHtWTEFOMzB9
IG91dGZhY2UgJHtXQU59CiAgICBtYXNxdWVyYWRlCiAgICByb3V0ZSBhbGwgYWNjZXB0CgovLy8v
CgpBbGwgdGhlIGxpbmVzIHRoYXQgSSd2ZSBjb21tZW50ZWQgd2VyZSBteSBhdHRlbXB0cyBhdCBw
b3J0IGZvcndhcmRpbmcgYW5kCmJsb2NraW5nIG91dGdvaW5nIEROUywgYnV0IG5vbmUgb2YgdGhl
bSBzZWVtIHRvIHdvcmsuIFRoYW5rcyBmb3IgYW55IGhlbHAKaW4gYWR2YW5jZSBhbmQgYWdhaW4g
dGhhbmtzIGZvciB0aGlzIGF3ZXNvbWUgYXBwbGljYXRpb24hCgotLSAKUGVkcm8gR3VpemVsaW5l
CnAgPHBlZHJvQGd1aXplbGluZS5jb20+ZWRyb0BndWl6ZWxpbmUuY29tCl9fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCkZpcmVob2wtc3VwcG9ydCBtYWlsaW5n
IGxpc3QKRmlyZWhvbC1zdXBwb3J0QGxpc3RzLmZpcmVob2wub3JnCmh0dHA6Ly9saXN0cy5maXJl
aG9sLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2ZpcmVob2wtc3VwcG9ydA==