Re: [suse-security] Problems Understanding SuSEfirewall2

[Arjen Runsink <arjen@xxxxxxxxxxx>]

Quoting remote <remote@xxxxxxxxxxxxxxxxxxxxxxx>:

> Hi !
> 
> I seem to have a problem with SuSEfirewall2. I administrate a Linux
> router
> LAN except for the following protocols/ports : pop3, pop3s, http,
> https,
> ftp,
> ftps, smtp, ssh, domain. 
> I also have to keep the port 7271 open for licensing purposes.

You should read the manual and general networking how-to stuff. You are
giving acces from the internet to setup a connection to your network
(and the firewall explicitely which is wrong
> Please help !

For brevity I only show what should be changed.

BB, Arjen


FW_AUTOPROTECT_SERVICES="yes"
 
FW_SERVICES_EXT_TCP=""
 
FW_SERVICES_EXT_UDP=""
 
FW_SERVICES_INT_TCP=""

FW_SERVICES_INT_UDP=""
 
FW_ALLOW_INCOMING_HIGHPORTS_TCP="no"

FW_ALLOW_INCOMING_HIGHPORTS_UDP="no"

FW_SERVICE_AUTODETECT="yes"
 
FW_SERVICE_DNS="no"
 
FW_FORWARD="100.120.55.18,100.120.204.51,tcp,7127 \
100.120.55.18,100.120.204.56,tcp,7127 \
100.120.55.18,100.120.204.58,tcp,7127"

FW_KERNEL_SECURITY="yes"

-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/


-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here