[ILUG] Shorewall question

[Andres Jimenez]

2006/3/29, Andres Jimenez <gandresin at gmail.com>:

> FW=/sbin/iptables
>
> 1-create a policy for those servers and define the list of servers
>        $FW -N name_to_server_policy
>         $FW -A name_to_server_policy -d IP_SERVER1 -j ACCEPT
>         $FW -A name_to_server_policy -d IP_SERVER2 -j ACCEPT
>         $FW -A name_to_server_policy -d IP_SERVER3 -j ACCEPT
>         $FW -A name_to_server_policy -d IP_SERVERn -j ACCEPT
>
> 2- define your rules:
> (for example ssh and dns)
> $FW -A FORWARD -p tcp -m multiport --dports 22,53  -j name_to_server_policy
>

I forgot to mention something important.
This policy  accetps only INCOMING packages, so you need another
policy to accept outgoing packages.
You can use different policies for different kinds of
server/workstations, so you just need to add/remove computers from
your lists.

--
Andres Jimenez