Service Screening
Define the Source and Destination ports for each service. This alters only
the internal and perimeter network.
The configuration-file is 'etc/config/<service>.flt'.
The "Intern" field must contain the innermost
(internal net -> perimeter net -> internet) host!
If "Log" is checked here
you will log connects regardless of the direction or the definition of the
service.
Example:
You want to be able to telnet any host in the internet from
your domain. But telnet towards your domain is only via the Gateway
possible. This means that you have to setup the following definitions:
Intern |
Extern |
Direction |
$internal $PERIMETER |
$any |
Outgoing |
$GW |
$any |
Incoming |
$internal |
$GW |
Incoming |
(The ´Outgoing´ direction defines ´Intern
-> Extern´)
(c) 1998 J. Friedrich