Changes

From SME Server

463 bytes added , 18:20, 10 October 2010

added section Block outgoing IP or mac

Line 45: Line 45:

/sbin/e-smith/expand-template /etc/rc.d/init.d/masq

/etc/init.d/masq restart

====Block outgoing IPs or mac addresses====

This section needs improvement.

See this forum post for clues re doing this, based in part on the concept of blocking incming traffic from specific external IPs.

http://forums.contribs.org/index.php/topic,46036.0/all.html

Formulation of suitable iptables rules will be required, use

man iptables

The template fragment needs to be placed in the right order, so that other rules do not negate the rule eg

10blockIP

====Block outgoing ports====

624

edits

Firewall (view source)