OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [suse-security] IPCHAINS and dynamic IP addresses
From: Bogdan Zapca (lupeadmin2.ecosoft.ro)
Date: Fri Jul 28 2000 - 04:32:31 CDT

-----BEGIN PGP SIGNED MESSAGE-----

Why don't you try the ip-up script as you talk about ppp. I know that SuSE
has an ip-up script with firewall rules set up (with ipfwadm as I
remember).

- ---
Bogdan Zapca System Administrator
SC EcoSoft SA Internet Service Provider
1-7 Deva st, Cluj-Napoca, Romania Tel: +40 64 199696
    PGP: admin2.ecosoft.ro.pgp">http://www.itotal.ro/lupeadmin2.ecosoft.ro.pgp
                  http://www.ecosoft.ro

On Thu, 27 Jul 2000, Charles Price wrote:

> At the moment I just have a masquerading firewall but I'm hoping to add a shell script containing ipchains rules onto it soon. At the moment the script defines variables at the beginning and uses them later. ie.
>
> #!/bin/sh
>
> EXTERNAL_INTERFACE="eth0"
> IP_ADDR="192.168.1.20"
>
> ipchains -A input $EXTERNAL_INTERFACE -s $IP_ADDR etc.etc.
>
>
> Although there is a problem.
>
> I've got a dynamically assigned IP address, so in theory I'd have to re-configure the script every time PPP was started. Is there and environment variable in BASH to do the job $IP_ADDR or something like that, but then how does it know which? eth0 or ppp0? I feel I'm going to have to write a more cunning piece of script for this one. Any ideas?
>
> Kind Regards
>
> Charles P.W. Price
> ------------------------------
> charlieiago.org.uk
> www.iago.org.uk
>

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBOYFTMtPv6ylvTc6pAQEjOgP+I5uechpDb2imW+n0Gs9q+NYk5O0Ucii+
HlWp4oRXx5ap2b0cNY3FOH83dxugFsdiXaVfPNQ8oN0my0ekfZQKn3W40m+tQ731
STFrauFD0G7tkIz5nm8V00jeIj6zYIq3KLB6rd6bNxLB9O3Leonm1VFunibficxE
sNE20LEZoXU=
=jcK3
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com