08-12-2011
The answer will most likely depend on what the vendor has to offer, as some firewall can operate on Layer 4 and below, while others may even work on Layer 7 (application).
8 More Discussions You Might Find Interesting
1. IP Networking
Hi,
Is there any way that i can directly take out the IP packet and see its contents.
Waiting for your answer ..............
Bye (4 Replies)
Discussion started by: manjunath
4 Replies
2. UNIX for Dummies Questions & Answers
Howdie everyone...
I have a shell script RemoveFiles.sh
Inside this file, it only has two commands as below:
rm -f ../../reportToday/temp/*
rm -f ../../report/*
My problem is that when i execute this script, nothing happened. Files remained unremoved. I don't see any error message as it... (2 Replies)
Discussion started by: cheongww
2 Replies
3. UNIX for Advanced & Expert Users
I have an Ubuntu lucid 10.4 running as NIS client, the machine was working fine as a NIS client until i move the machine to a DMZ firewall.
I tried to get NIS client working through the firewall by I fixing ypbind port to a static port by modifying the file “/etc/default/nis”
YPBINDARGS="-p... (1 Reply)
Discussion started by: hassan1
1 Replies
4. Cybersecurity
Exercise:
Protection of WEB and DNS servers using the context-free rules for packet filtering:
- Protect your WEB-server, so that would be for him can be accessed by browsers, and could go to dns.
- Protect your primary DNS-server so that it could be to contact clients and secondary servers.... (1 Reply)
Discussion started by: numeracy
1 Replies
5. Homework & Coursework Questions
how to protect service dns with filtering tables (statefull, stateless)?
iptables -L
iptables ...? (1 Reply)
Discussion started by: nini
1 Replies
6. Shell Programming and Scripting
My script work on Linux but not work in sun os.
my script.
logFiles="sentLog1.log sentLog2.log"
intial_time="0 0"
logLocation="/usr/local/tomcat/logs/"
sleepTime=600
failMessage=":: $(tput bold)Log not update$(tput rmso) = "
successMessage="OK"
arr=($logFiles)... (7 Replies)
Discussion started by: ooilinlove
7 Replies
7. AIX
(5 Replies)
Discussion started by: Vishal_dba
5 Replies
8. IP Networking
hi all. and sorry for the random question, but this sparkled a raging flame-war at work and i want more points of view
situation
a router, with linux of some sort,
dhcp client requesting for ip in wan1 (as usual with wan ports)
dhcp server listening in lan1, and assigning ip (as usual... (9 Replies)
Discussion started by: broli
9 Replies
MASON(1) MASON(1)
NAME
mason - interactively create a firewall
SYNOPSIS
mason < logfile > rulefile
DESCRIPTION
This manual page briefly documents the mason command.
mason interactively generates a set of firewall rules for a Linux-based firewall. This is done by turning on full IP logging, watching the
logs for connections, and generating rules describing the connections seen. mason is familiar with most of the quirks of various connec-
tion types (such as ftp and IRC), and can output rules for 2.0.x ipfwadm, 2.2.x ipchains, and Cisco packet filters.
mason operates by reading in log file information from standard input and writing firewall rules to standard output. This allows mason to
work offline or on a separate system. Real-time firewall generation can be achieved with a command like tail(1).
Most users will want to run mason with a user-friendly interface such as mason-gui-text(1).
ENVIRONMENT
mason is configured using the following environment variables.
ECHOCOMMAND
Sets the type of firewall rules that mason should output to standard out. Allowed values include "ipfwadm" and "ipchains". By
default, mason outputs whatever kind of rules are supported by the currently running Linux kernel.
DOCOMMAND
Sets the type of firewall rules that mason should run immediately when a rule is generated. Allowed values include "ipfwadm" and
"ipchains". By default, mason outputs whatever kind of rules are supported by the currently running Linux kernel.
HEARTBEAT
If set to "yes", mason will output a "+" or "-" to standard error whenever a rule generated by mason has been triggered.
DYNIP Set this to the list of interfaces that have dynamically assigned addresses, separated by spaces.
SEE ALSO
mason-gui-text(1)
AUTHOR
This manual page was written by Jeff Licquia <jeff@luci.org>, for the Debian GNU/Linux system (but may be used by others).
MASON(1)