Service Screening

Define the Source and Destination ports for each service. This alters only the internal and perimeter network.
The configuration-file is 'etc/config/<service>.flt'.

The "Intern" field must contain the innermost (internal net -> perimeter net -> internet) host!

If "Log" is checked here you will log connects regardless of the direction or the definition of the service.


Service
Intern Extern Direction Log
Log
Log
Log

Example:
You want to be able to telnet any host in the internet from your domain. But telnet towards your domain is only via the Gateway possible. This means that you have to setup the following definitions:
Intern Extern  Direction 
$internal $PERIMETER  $any Outgoing
$GW $any Incoming
$internal $GW Incoming
(The ´Outgoing´ direction defines ´Intern -> Extern´)


(c) 1998 J. Friedrich