OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: The Red Knight (meberhardt_at_wi.rr.com)
Date: Sun Jul 14 2002 - 23:46:16 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Fri, 12 Jul 2002 09:59:04 +0000, SB CH wrote:
    >Hello,
    >
    >I would like to forward ftp request to other server's other port to improve
    >the security. Is it possible?

    --snipped--

    use ipchains or iptables and use "portfw"
    i do the very same thing on my redhat NAT server, below is my=3D
     ruleset as an example

    /usr/sbin/ipmasqadm portfw -a -P tcp -L $IPADDR 21 \
     -R any_ip_here 21
    /usr/sbin/ipmasqadm portfw -a -P tcp -L $IPADDR 20 \
     -R any_ip_here 20

    $IPADDR is the IP that the request is going to
    the second line is sending that request off to whatever up you=3D
     want, with port

    i believe you enable portfw'ing with:
    /usr/sbin/ipmasqadm portfw -f
    but it has been awhile since i set this all up

    ~Red Knight