| Newsgroups |
gmane.network.guarddog |
| Message-ID |
<[email protected]> |
I've been using guardog for a while and noticed while trying to
configure some services that guard dog seems to only create a rule for
the specified dport. the srcport is any out port on the system.
Selecting bidirectional simply reverses the direction.
ipchains -A f2to1 -p udp --sport 0:65535 --dport 111:111 -j ACCEPT
ipchains -A f1to2 -p udp --sport 111:111 --dport 0:65535 -j ACCEPT
But what some apps do is bind to a udp port for accepting incoming but
then also connect to a server udp port.. in a peer to peer world..
What is required is to add an entry like this
ipchains -A f2to1 -p udp --sport 111:111 --dport 0:65535 -j ACCEPT
ipchains -A f1to2 -p udp --sport 0:65535 --dport 111:111 -j ACCEPT
Any comments?
-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php