You guys did a great job on the firewall generator. After the ten minute learning curve, I was adding all kinds of rules to my script.
One possible suggestion for the future: The ability to add ranges of ports to the port forwarding section. Currently you can only add a port that is defined in the /etc/services, but many programs, like DirectX (uh) games use tons of ports in the 2300 to 2400 range. It would take me all day to enter those into /etc/services and then define them in the firewall generator.
Anyway, just a thought. I'm looking forward to future versions. Thanx...
-Tim
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I'm not sure that port forwarding a range of ports is possible with ipmasqadm. The syntax only supports a single port. I guess what you probably need is a single ruleset that creates multiple ipmasqadm rules. Note that I'd intended to do this at some point (eg: allowing multiple ports to be specified in a single firewall rule) but I'm not sure how possible it's likely to be with the current restrictions of the web interface.
Programs that do allow this sort of ruleset to be set up (eg: the configurator for Firewall-1) generally use a windows based or other GUI, rather than a web form. I'll see what I can do.
Selecting multiple ports in the pull down port list is likely to be the hairy bit. That should be a bit easier to do with the last set of user interface changes.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I can't remember where I found these, but they are supposed to forward multiple ports. I don't even know if they work because I never got a chance to test them. You may want to try.
#Forward ports for MS DirectPlay
ipmasqadm autofw -A -v -r udp 2300 2400 -h 192.168.0.101
ipmasqadm autofw -A -v -r tcp 2300 2400 -h 192.168.0.101
ipmasqadm autofw -A -v -r tcp 47624 47624 -h 192.168.0.101
ipmasqadm autofw -A -v -r udp 47624 47624 -h 192.168.0.101
ipmasqadm autofw -A -v -r udp 28800 28900 -h 192.168.0.101
If I figure out where I found them, I'll let you know.
Thanx
-Tim
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
You guys did a great job on the firewall generator. After the ten minute learning curve, I was adding all kinds of rules to my script.
One possible suggestion for the future: The ability to add ranges of ports to the port forwarding section. Currently you can only add a port that is defined in the /etc/services, but many programs, like DirectX (uh) games use tons of ports in the 2300 to 2400 range. It would take me all day to enter those into /etc/services and then define them in the firewall generator.
Anyway, just a thought. I'm looking forward to future versions. Thanx...
-Tim
I'm not sure that port forwarding a range of ports is possible with ipmasqadm. The syntax only supports a single port. I guess what you probably need is a single ruleset that creates multiple ipmasqadm rules. Note that I'd intended to do this at some point (eg: allowing multiple ports to be specified in a single firewall rule) but I'm not sure how possible it's likely to be with the current restrictions of the web interface.
Programs that do allow this sort of ruleset to be set up (eg: the configurator for Firewall-1) generally use a windows based or other GUI, rather than a web form. I'll see what I can do.
Selecting multiple ports in the pull down port list is likely to be the hairy bit. That should be a bit easier to do with the last set of user interface changes.
I can't remember where I found these, but they are supposed to forward multiple ports. I don't even know if they work because I never got a chance to test them. You may want to try.
#Forward ports for MS DirectPlay
ipmasqadm autofw -A -v -r udp 2300 2400 -h 192.168.0.101
ipmasqadm autofw -A -v -r tcp 2300 2400 -h 192.168.0.101
ipmasqadm autofw -A -v -r tcp 47624 47624 -h 192.168.0.101
ipmasqadm autofw -A -v -r udp 47624 47624 -h 192.168.0.101
ipmasqadm autofw -A -v -r udp 28800 28900 -h 192.168.0.101
If I figure out where I found them, I'll let you know.
Thanx
-Tim
I've briefly tested these .. they do work!