Re: (PM) Email Only Filter?

Miquel van Smoorenburg (list-portmaster-users@news.cistron.nl)
4 Feb 1998 02:02:12 +0100

In article <012601bd30e8$e21031e0$fde540ce@zak.cyberlink-inc.com>,
Zak Wolfinger <zak@cyberlink.com> wrote:
>Can anyone help me setup an e-mail only filter? I currently
>have:

Well I don't feel like debugging your filter this time at night :) but
FWIW, here's mine. It only allows ping, DNS, pop3 and smtp. Traceroute
is also blocked for no particular reason.

195.65.68.0/26 and 195.64.65.0/26 are our local networks with the
pop3, dns and smtp servers on it.

del filter mailonly.in
del filter mailonly.out

add filter mailonly.in
set filter mailonly.in 1 permit icmp
set filter mailonly.in 2 permit udp dst eq 53
set filter mailonly.in 3 deny udp dst gt 33500
set filter mailonly.in 4 permit udp dst gt 33433
set filter mailonly.in 5 permit tcp 0.0.0.0/0 195.64.65.0/26 dst eq 25
set filter mailonly.in 6 permit tcp 0.0.0.0/0 195.64.68.0/26 dst eq 25
set filter mailonly.in 7 permit tcp 0.0.0.0/0 195.64.65.0/26 dst eq 53
set filter mailonly.in 8 permit tcp 0.0.0.0/0 195.64.68.0/26 dst eq 53
set filter mailonly.in 9 permit tcp 0.0.0.0/0 195.64.65.0/26 dst eq 110
set filter mailonly.in 10 permit tcp established

add filter mailonly.out
set filter mailonly.out 1 permit icmp
set filter mailonly.out 2 permit udp
set filter mailonly.out 3 permit tcp 195.64.65.0/26 0.0.0.0/0 dst eq 25
set filter mailonly.out 4 permit tcp 195.64.68.0/26 0.0.0.0/0 dst eq 25
set filter mailonly.out 5 permit tcp established

Mike.

-- 
 Miquel van Smoorenburg |  The dyslexic, agnostic, insomniac lay in his bed
    miquels@cistron.nl  |  awake all night wondering if there is a doG

-- 
The From: and Reply-To: addresses are internal mail2news gateway addresses.
Reply to the list or to miquels@cistron.nl (Miquel van Smoorenburg)
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.