Anyone use Firestarter?

aquaboot · 08-28-2005, 04:35 PM

Hello,

I'm new to firestarter 1.01 and have a quick question. I'd like to control access to my server by turning ports off or on. For instance, I may want to allow ftp access from any external destination for a few hours and then be able to turn off access to port 22 completely. I can't seem to find a way to make policies for ports in this way. Am I just overlooking something?

Thanks Much,

aquaboot

mrcheeks · 08-28-2005, 04:56 PM

i think you are overlooking but not sure, could you do something like that in windows?

aquaboot · 08-28-2005, 06:17 PM

Hi and thanks for the response.

I'm guessing that I am overlooking something seeing as how this is a very basic need for firewall configuration... but I can't find a way to do it. I don't use windows, so I can't speak to firestarer used in that os.

Any help will be very much appreciated.

-aq

Vgui · 08-30-2005, 12:18 AM

As far as I know, iptables doesn't have time based rules (firestarter is basically a front for iptables).
My suggestion would be to have two sets of rules, one with the port restricted and other policies implemented. Then set them up in a cron job, or using at, and have them switch when you need.
Or, just close / open the ports by manually adding / removing an iptables rule (again with a scheduled cron job or at).

aquaboot · 08-30-2005, 08:53 AM

Thanks for the reply,

Actually, I wasn't looking for time-based functionality; I was just giving an example of how I may want to turn (manually) ports on or off. I did find the port specifier though, FINALLY. Now FS is working well.

Cheers,

aquaboot