RE: [cobalt-users] IP Firewall on qube2 - Has ANYONE gotten it towork?

["Doug Forman" <doug@xxxxxxxxxxx>]

> > Ok, this is making me crazy...
> >
> > I have gotten my primary & secondary up and running.  IP masq & NAT
> > all seem to be working fine.  Life gets weird when I throw IP
> > filtering into the mix.
> >
> > Being somewhat new to this I went to cobalt's web site and used the
> > firewall wizard.  Input the info in my Qube 2, and voila - nothin'.
> > Well, almost.
> >
> > POP3 & SMTP seem to work, but web, ping, and DNS are toast.
> > Disabling the IP Filter rectifies the problem.
> >
> > Here's the filter configuration (IP addresses changed to
> protect the innocent)
>
> <snip>
>
> A friend of mine and I were screwing around with this this
> weekend.  I think
> the key is that you have to have the DENY rules FIRST, and then the allow
> messages.

Ummm...  I think you might have this backward, Kris?

In every firewall I've ever configured, you always ALLOW each permitted
port/protocol first, then DENY everything else.  If you DENY all first, it
quits right there, never checking the subsequent ALLOWED ports/protocols.

See message thread here from a few days ago about this same subject  :-)

Doug