From mike@boobaz.net Tue Nov 13 10:40:07 2001 Received: from mailscan2.cac.washington.edu (mailscan2.cac.washington.edu [140.142.33.16]) by lists.u.washington.edu (8.11.6+UW01.08/8.11.6+UW01.10) with SMTP id fADIe5n168752 for ; Tue, 13 Nov 2001 10:40:06 -0800 Received: FROM mxu3.u.washington.edu BY mailscan2.cac.washington.edu ; Tue Nov 13 10:40:05 2001 -0800 Received: from boobaz.net (c1056043-a.sttln1.wa.home.com [24.10.40.236]) by mxu3.u.washington.edu (8.11.6+UW01.08/8.11.6+UW01.10) with ESMTP id fADIe4208131 for ; Tue, 13 Nov 2001 10:40:05 -0800 Received: from c1056043-a (c1056043-a [24.10.40.236]) by boobaz.net (8.11.1/8.11.1) with ESMTP id fADIe4826023 for ; Tue, 13 Nov 2001 10:40:04 -0800 Date: Tue, 13 Nov 2001 10:40:04 -0800 (PST) From: "M. Hornung" X-Sender: mike@c1056043-a.sttln1.wa.home.com To: UW Linux Group Subject: Re: ipchains question In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII I think what you're looking for is what's commonly called "stateful inspection". Stateful inspection, simply put, makes the kernel remember all current network connections to your computer and what state they're in - and this state table can be used to make packet filtering decisions. This was not available using 'ipchains' but is now available with 'iptables' and a 2.4 kernel. Check out Rusty's Unreliable Guides for some HOWTOs: http://netfilter.samba.org/unreliable-guides/ --------------------------- -=<(| mike@boobaz.net |)>=- On Tue, 13 Nov 2001 at 10:17, Kjell Konis wrote: |Hi, | |The last time I set up a firewall I did it on a bsd box with ipfw. There |was a command like (not sure about syntax) | |ipfw allow from any to any established | |I think what it did was allow stuff in that was specifically requested. |Is there a way to do this with ipchains? Basically what I want to do is |accept ssh connections and deny everything else but still have web, ftp, |etc. clients work. | |Kjell | .