Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 1345 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is this rule safe?

x-cimo
Internal(Network) -> Any -> External (WAN) (Address) as the first (top) rule.

The purpose of the rule is to let internal user, connect to external (internet domain name) hosted inside the network.

Let's say: www.hello.com, is at 192.168.1.10 (with DNAT).

Currently if internal user go to www.hello.com, the packet filter block SYN from Internal IP, to the WAN interface IP.

This rule the packet pass.  But does it open a big hole?

Thanks


This thread was automatically locked due to age.
Parents Reply Children
No Data