[Pfilter-users] Problem of Pfilter config. Help!

[Weirong Z. <we...@ma...>]

Dear all:

   As all we know, a firewall is very important for security.

   And pfilter is a firewall compiler shipped with OSCAR.

   I try to config pfilter to make it work for my cluster.

   I set
===================================================
   INTERNAL eth1   # inside network interface
   FILTERED eth0   # outside

   open tcp ssh
===================================================

I found after pfilter start all packages are filtered out, except SSH.
From outside, other machines can not ping me, can not telnet, that's just
what I want.
However from inside, I also can not go outside, for example, I can not
telnet to a outside telnet server. More important, I can not get NIS
server's response, can not get NFS server's response. It closed all my
network connection except SSH. That's not what I want.

Has anybody met the same problem?
Would you like to tell me how to properly configure the pfilter.


Thanks a lot!