Re: ChoiceNet questions

Chad Scott (chad@txdirect.net)
Wed, 2 Jul 1997 11:15:14 -0500 (CDT)

On Mon, 30 Jun 1997, Jim Hribnak wrote:

> Since there is no mailing list specific to CHoicenet, i figure this may be
> the place for it <keep the flames back> <grin>
>
> I am awaiting a response from Livingston on some problems with Choicenet
> but cant wait forever..
>
> Is anyone running ChoiceNet and noticing in their choicenet.log file the
> following lines:
>
> Every now and then i get this error (command error detected at rule 1
> while downloading filter nomail.in to <portmaster name>, will retry)
>
> The filter looks like this:
>
> permit tcp established
> deny 0.0.0.0/0 tcp dst eq 25 log
> deny 0.0.0.0/0 tcp dst eq 110 log
> permit udp dst eq 53
> perrmit tcp dst eq 53
> permit icmp
> permit notify

The first line is probably causing your problems. I think the line needs
to read:

permit tcp estab

> My questions are:
>
> 1) What does this error mean?

The error means the Portmaster doesn't like how you've written line 1.

> 2) Does it mean the filter is in place on the portmaster by a user already?

No.

> 3) Is the above filter correct from stopping DEMO user MAIL/POP3 access?

It would be better written as follows:

permit tcp estab
permit tcp src eq 20
deny tcp dst eq 25 log
deny tcp dst eq 110 log
permit udp dst eq 53
permit tcp dst eq 53
permit icmp

> 4) Why does choicenet complain sometimes about line 1 of the filter?

See question one.

Chad Scott | chad@txdirect.net
Systems Administrator | Voice 210-308-9800 x206
Internet Direct, Incorporated | FAX 210-308-9240
---------------------------------------------------------
Finger chad@txdirect.net for PGP Public Key