filters to internet

Robert Hayne (robert@kelman.ab.ca)
Tue, 17 Dec 1996 16:53:10 -0700

I was trying to create filters for my PM2er running 3.3.3 . The router
needs to allow for filtering of one dialout ISDN set to the internet. This route
would basically allow anything from inside but limit outside access.

What I have so far is simplistic but maybe all I need.

1 deny 0.0.0.0/0 0.0.0.0/0 ip log
2 permit 0.0.0.0/0 0.0.0.0/0 tcp estab
3 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 53 log
4 permit 0.0.0.0/0 0.0.0.0/0 udp src eq 53 log
5 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 25 log
6 permit 0.0.0.0/0 0.0.0.0/0 tcp src eq 20 dst gt 1023 log
7 permit 0.0.0.0/0 0.0.0.0/0 tcp src eq 80 log
8 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 80 log

One other thing I needed was for the hits to be logged to syslog. However I have
never gotten the syslog function to work consistantly. My radius server is running
solaris 2.5.1 .

Please email any responses directly.

-----

/* Kelman Seismic Processing Robert Hayne robert@kelman.ab.ca */
/* 600 540 5 Ave S.W. hayner@cuug.ab.ca */
/* Calgary Alta Canada */
/* http//www.cuug.ab.ca:8001/~hayner
You may be disappointed if you fail, but you are doomed if you don't try.

----