Restricting Internal Users Ports

teknoe_at_gmail.com
Date: 10/29/05

  • Next message: GS: "Re: installed openvpn, not working" 
    Date: 28 Oct 2005 21:43:36 -0700

    I am attempting to setup an internal network on my Ubuntu machine. I
    have taken a look at the various iptables rules and believe I have a
    rather complex setup. I need to use IP Masquerading for the internal
    network, but I only want the internal users to be able to use SSH (port
    22). Once the users are connected, I want them to be able to access
    any established port so that I can use SSH tunneling for web/mail
    access to the external network. The main reason behind this is I will
    be using a wireless network and wish to use SSH in addition to the
    standard WAP protection, because I have "snoopers" in my neighborhood.
    For the IP Masquerading, I have used:
    iptables --table nat --append POSTROUTING --jump MASQUERADE --source
    192.168.0.0/24

    I am thinking that before this line I need to use:
    iptables -A INPUT -i eth1 -s 192.168.0.0/24 --dport 22 -j ACCEPT

    My external device is eth0, and my internal device is eth1. Any help
    would be appreciated. Thank you.

  • Next message: GS: "Re: installed openvpn, not working"

    Relevant Pages

    • RE: Securing a Local Network
      ... Show the Management of your company the insecurity of the Peer to Peer ... setup and discuss what risks are they willing to accept. ... -Cost of getting the web server and the mail server internally versus having ... -Use an older box for Intrusion Detection on the internal network as well. ...
      (Security-Basics)
    • Re: ipfw and ssh
      ... # Allow person SSH access ... # Allow setup of incoming ssh ... I need someone outside of my network to have SSH ...
      (freebsd-questions)
    • Re: Client computer wont connect to internet ATTN: Joe Crown
      ... for my host/client setup. ... >When I supported Windows 98 & Windows ME the most common cause of ... >> When I try to connect to the internet using Firefox or Internet ... >> 7) In the Manufacturers box, click Microsoft, in the Network Protocols ...
      (microsoft.public.windowsxp.network_web)
    • Re: Network Connections x 2 PCs
      ... The setup is quite ... >>> If you have a broadband router, run XP's Network Setup Wizard on both ... tell it that the computers connect to the ... >>> If you have a hub, the setup depends on how many IP addresses you get ...
      (microsoft.public.windowsxp.general)
    • RE: Site-to-Site VPN not working
      ... I was looking through my documentation on this setup. ... In ISA on the remote server, add a site-to-site VPN using the name of the ... add a Network Rule called REMOTEOFFICE to route ...
      (microsoft.public.isa)