Re: filters to internet

MegaZone (megazone@livingston.com)
Wed, 18 Dec 1996 14:36:09 -0800 (PST)

Once upon a time Robert Hayne shaped the electrons to say...
> 1 deny 0.0.0.0/0 0.0.0.0/0 ip log

This will block EVERYTHING. That's it. The other rules will be skipped.

You are saying deny all IP traffic from anywhere, to anywhere.

> 2 permit 0.0.0.0/0 0.0.0.0/0 tcp estab
> 3 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 53 log
> 4 permit 0.0.0.0/0 0.0.0.0/0 udp src eq 53 log
> 5 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 25 log
> 6 permit 0.0.0.0/0 0.0.0.0/0 tcp src eq 20 dst gt 1023 log
> 7 permit 0.0.0.0/0 0.0.0.0/0 tcp src eq 80 log
> 8 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 80 log

All of these are 'from everywhere, to everywhere'. You probably way to be
more specific about what you let through.

>One other thing I needed was for the hits to be logged to syslog. However I h
>never gotten the syslog function to work consistantly. My radius server is ru
>solaris 2.5.1 .

syslog has nothing to do with RADIUS.

-MZ

--
Livingston Enterprises - Chair, Department of Interstitial Affairs
Phone: 800-458-9966 510-426-0770 FAX: 510-426-8951 megazone@livingston.com
For support requests: support@livingston.com  <http://www.livingston.com/> 
Snail mail: 4464 Willow Road, Pleasanton, CA 94588