IRIX and Software

Configuring IPFilter when using DHCP

cris_adder avatar
cris_adder
Member
Who joined Jan. 13, 2010, 1:10 a.m.
and authored 63 notes
Wrote the following at June 11, 2010, 5:13 a.m...
Have DHCP setup at home which my O2 accesses under Irix 6.5 and trying to configure IPfiler as a firewall.

Just wanted to confirm that when setting up the IPFilter rules I can use 192.168.2.1/24 to indicate my O2 ip-address, which will be some ip-address that DHCP allocates in the range 192.168.2.* (since this is not known before hand).

Is this right, or is there a better way to handle DHCP, rather than specifying "any"?

Thanks...
mila avatar
mila
Big Fan
Who joined Dec. 31, 2009, 5:20 a.m.
and authored 156 notes
Wrote the following at June 12, 2010, 1:57 a.m...
cris_adder wrote:
Have DHCP setup at home which my O2 accesses under Irix 6.5 and trying to configure IPfiler as a firewall.

Just wanted to confirm that when setting up the IPFilter rules I can use 192.168.2.1/24 to indicate my O2 ip-address, which will be some ip-address that DHCP allocates in the range 192.168.2.* (since this is not known before hand).

Is this right, or is there a better way to handle DHCP, rather than specifying "any"?

Thanks...


Is this for outgoing traffic(ipfnat.conf)?
I think you should use 192.168.2.0/24 instead to cover 192.168.2.1-255 range.

Are you having ipfilter on the O2 itself or on a dedicated firewall?

/michael

_________________
--
No Microsoft product was used in any way to write or send this text.
If you use a Microsoft product to read it, you're doing so at your own
risk.
cris_adder avatar
cris_adder
Member
Who joined Jan. 13, 2010, 1:10 a.m.
and authored 63 notes
Wrote the following at June 12, 2010, 11:22 p.m...
Thanks for your help ...

Quote:
Is this for outgoing traffic(ipfnat.conf)?


This was being configured for incoming traffic, and the configuration file is "/etc/ipf.conf"

Quote:
Are you having ipfilter on the O2 itself or on a dedicated firewall?


Attempting to use Ipfilter on the O2 itself. So I guess from that perspective, using "any" for incoming traffic is probably just as good, since there is only one destination, i.e. not really trying to protect other nodes, does that sound right?

I am not an expert on IPFilter in anyway, and have just been going through the manuals to work out what is best.

Thanks
Cirs