Re: [Shorewall-users] how to Deny access from the loc to the net zone -

[Joshua B. <l0...@ya...>]

--- Colin Viebrock <co...@ea...> wrote:
> I assume you have in your policy file
> 
> 	loc		net		ACCEPT
> 
> Can't you just add entries to your rules file like so?
> 
> 	DROP	loc:192.168.1.x		net		all		-
> 
> - Colin

Or if your using host range...an all host fall one after the other that you want to deny access...

Accept loc:!192.168.1.1-192.168.25 net all -

I think that this will allow everything else on the 192.168.1.x network except .1 through .25...I
haven't tried this yet because I only have one host behind my shorewall setup. But I think that
this would work. Tom?

Tom could configuring the "hosts" file work if configured correctly for what he's trying to do?


JBanks



__________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo.
http://search.yahoo.com