Dotaz: firehol pppd

[langy]

Zdravim.

Mel bych dotaz prave jsem si nainstaloval firehol a nakonfiguroval. Pres wifi a sitovku mi internet slape ale pres vytaceni modemem ne. Nevim jak mam nakonfigutovat firehol.conf pro pppd pripojeni. Muzete mi nekdo poradit jak to provest. dik za odpovedi

Odpovědi

[kozzi]

No a to pripojeni pres pppd vam bez toho firehol funguje nebo ne?

[langy]

Jo to funguje kdyz vypnu firehol tak ni internet slape. Problem neni v pppd pripojeni ale v nastaveni fireholu a proto sem pisu jestli mi muze nekdo poradit :). Dik

[kozzi]

Oki, ja jen abych veděl. No já firehol s pppd používal a problém jsem neměl. A co přesně nefunguje? Nejde vůbec nic ani ping nebo jen některé služby? Možná by se hodilo napsat s jakým nastavením jsi to zkoušel.

[langy]

ok tady posilam to nastaveni meho fireholu. firehol.conf:

#
# $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
#
# This configuration file will allow all requests originating from the
# local machine to be send through all network interfaces.
#
# No requests are allowed to come from the network. The host will be
# completely stealthed! It will not respond to anything, and it will
# not be pingable, although it will be able to originate anything
# (even pings to other hosts).
#

version 5

# Accept all client traffic on any interface
# interface any world
# client all accept

DEFAULT_CLIENT_PORTS="1024:65535"

server_icq_ports="tcp/5190"
client_icq_ports="default"


#interface eth+ internet src not "${UNROUTABLE_IPS}"
interface eth+ internet
    policy drop
    protection strong 10/sec 10
    server ident reject with tcp-reset
    server ssh    accept
#    server ping    accept
    client dhcp    accept
    client dns    accept
    client http    accept
    client https    accept
    client ftp    accept
    client ntp    accept
    client ssh    accept
    client icq    accept
    client cups    accept
    client samba    accept

     client difm    accept



UNMATCHED_INPUT_POLICY="DROP"
UNMATCHED_OUTPUT_POLICY="DROP"
FIREHOL_LOG_LEVEL=4

Nejsem zadnej odbornik ale myslim si ze by tam melo byt neco o tom pppd :).

[kozzi]

a na tutorial na strankach fireholu si se dival? Viz.:

version 5
	
	interface eth0 home
		server dns	accept
		server ftp	accept
		server samba	accept
		server squid	accept
		server dhcp	accept
		server http	accept
		server ssh	accept
		server icmp	accept
	
	interface ppp+ internet
		server smtp	accept
		server http	accept
		server ftp	accept

[langy]

nedival ale podivam se :) dik moc odzkousim to :)

[langy]

tak jsem to odzkousel a nic :( nefunguje to