Linux jako firewall

[Jan Kasprzak]

David Rohleder pise:
: > BTW, vite ze Cisco IOS neumi filtrovat packety na zaklade zdrojoveho
: > 	portu? :-)
:  
: V Release 11.2 je toto:
: 
: access-list (extended) 
: 
: To define an extended IP access list, use the extended version of 
: the access-list global configuration command. To remove the access 
: lists, use the no form of this command. 
: 
:      access-list access-list-number [dynamic dynamic-name [timeout minutes]] 
: 	{deny | permit} protocol source source-wildcard 
: 	destination destination-wildcard [precedence precedence] 
:      	[tos tos] [log] 

	A zkousel jsi to? Neni to treba jen napsane v manualu (jak se nekdy
stava, a nejen u Cisca)? To by byl totiz asi jediny rozumny zpusob, jak povolit
ftp spojeni pres packetovy filtr Cisca...

-Yenya

--
Jan "Yenya" Kasprzak <kas na fi.muni.cz>            http://www.fi.muni.cz/~kas/
[[[[                      ^^^ Please note my new address.               ]]]]
[[[[      Czech Linux Homepage:  http://www.fi.muni.cz/~kas/linux/      ]]]]
``Hoping the problem  magically goes away  by ignoring it is the  "microsoft
approach to programming"  and should never be allowed.''    --Linus Torvalds