Re: sunscreen, source port

Kapetanakis Giannis <[email protected]> Mon, 17 May 2004 10:08:09 +0300 (EEST)
Newsgroups gmane.comp.security.sun
Message-ID <[email protected]>
On Fri, 14 May 2004, Valerie Anne Bubb wrote:

> Kapetanakis -
>
> I'm not sure if anyone ever responded to you or not - but
> I don't believe there is a way to filter based on source port.
>
> Valerie

Actually I found out a way to do that.
Suppose you want to catch source port 200 tcp.

You create a new service:
"test-service" SINGLE FORWARD "tcp" PORT * REVERSE "tcp" PORT 200

I must admit it is bizarre. Also it is not documented anywhere,
like it should...

Kapetanakis Giannis