Re: (PM) Filter question

Doug Ingraham (dpi@rapidnet.com)
Sun, 1 Feb 1998 18:01:43 -0700 (MST)

On Sun, 1 Feb 1998, David A. Taylor wrote:

> I am trying to limit telnet into our net from the outside to two hosts
> only. . .I thought the following filter would do it, but it is not working.
> . .am I missing something here?
>
> 15 permit 0.0.0.0/0 xxx.xxx.xxx.x/32 tcp dst eq 23
> 16 permit 0.0.0.0/0 xxx.xxx.xxx.y/32 tcp dst eq 23

We would have to see the rest of the filter lines. Filters start at the
top and are applied until there is a match. At the very least you would
want

17 deny 0.0.0.0/0 0.0.0.0/0 tcp dst eq 23

if you expect a denial to other devices.

Doug Ingraham From the Ferengi Rules of Acquisition.
Rapid City, SD #34 "Peace is good for business."
USA #35 "War is good for business."

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.