permit 0.0.0.0/0 xxx.xxx.xxx.x/24 tcp estab **where xxx.xxx.xxx.x/24 =
is the subnet you wish to filter**
permit 0.0.0.0/0 xxx.xxx.xxx.x/24 udp **permit udp for dns and such**
permit 0.0.0.0/0 xxx.xxx.xxx.x/24 icmp **permit icmp for ping and =
errors ect. ect.**
deny log **denys everything else and logs to syslog**
This will only allow connections for TCP to be made when they originate =
from the host, but permit udp and icmp. This would not allow someone to =
make a connection to a host unless the host initiated the request.
William Behrens
Feist Systems / www.feist.com
wbehrens@feist.com