This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Stealth fule with DHCP interface

Ok, I upgraded at last to astaro security linux 4.0. I had to do so, as my ISP swapped from fixed IP address to dynamic. Now I placed a router (sitecom) after my cablemodem and cloned the mac-address and so on. In the rulebase, I am looking for a way to apply stealthrules to the interface which points to the outside (internet).
Since this has to be dhcp, I am looking for the network where to apply this. What network should I use? When I had a fixed IP-address it was easy. Now what???

Any ideas?

thanx!

This thread was automatically locked due to age.

Parents

0 JimmyM over 20 years ago

If you have a router between your modem and ASL, the setting should take place on the router. ASL should just have a standard ethernet interface config with a fixed IP behind the router.
Cancel
Vote Up 0 Vote Down

Cancel
0 bvweelde over 20 years ago in reply to JimmyM

Really? It only works in my case when the interface of the connected pc or whatsoever has DHCP switched on, following the installation manuals. It does not work in another way. Also, the mac-address has to be cloned too. so I did. Now it is working with a pc on it with dhcp being set. When I change it into a fixed IP-address, it does not function anymore.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 20 years ago in reply to bvweelde

Are you doing MASQ on the router?
Cancel
Vote Up 0 Vote Down

Cancel
0 bvweelde over 20 years ago in reply to BarryG

Nope! Just DHCP. The router is a Sitecom and it is "as is" installed, with all firewall options still in default = disabled.
Just the mac-address has been cloned and the DHCP mode is "on". Off course I can see what new 'leased IP- address it got from the ISP, but this cannot be used as the lease period is very uncertain.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 20 years ago in reply to bvweelde

Well, if the router can do MASQ/NAT, your life will probably be a lot easier.
If it can, try it.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 20 years ago in reply to bvweelde

Well, if the router can do MASQ/NAT, your life will probably be a lot easier.
If it can, try it.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 bvweelde over 20 years ago in reply to BarryG

As I said, The router does not MASQ/NAT.
The only thing I like to know is how to define a stealthrule for a interface to the outside which happens to be DHCP'ed.
Such as: Any - (interface ext???) - reject

any?
Cancel
Vote Up 0 Vote Down

Cancel