Re: [cobalt-users] RaQ3 ipchains install help

["Nico Meijer" <nico.meijer@xxxxxxxxx>]

Rodolfo,

It's getting late, have to go soon, so short reply on and off list for your
convenience.

> It was posted; by Mike Vanecek I think. I'd repost it with credits, but I
> was using LookOut at the time, and my PST got corrupted, and I'm on Eudora
> now, and well... I can't get to it right now. <wry grin> Mebbe later.

I'll do a search, thanx.

> I think I've got it pretty much down, but the only thing I can't really do
> is figure out how to make it easily apply to several IP addresses on the
same
> box.

If you are searching for some way to have default rules to *all* IP's (and
later do specifics as you please), don't search further. I'll get back to
you tomorrow afternoon. I've got that covered.

[The RaQ's not online right now and I'm getting really tired ;-P]

> At this point, my kludge is to have separate copies of my ruleset for
> each IP address, and specifically allow services (or not) per address.
Yuck,
> but it'll work for a while 'til I catch on.

Well, as I said, you can do a bunch of stuff default for every IP.

> For God's sake check my syntax and that rule very carefully before you
> apply it.

Oh, don't worry. I'll read up.

> Just because you're paranoid doesn't mean they're not out to get you.
<grin>

You got me, my mind's a complete blank! :-)

Later... Nico