firscreen

[mahmoud_4]

Hi Admins,
I tried to use firescreen in tru64 V5.1A,
As described in manual "enternet express"
and add new rule to it ,
the rule dosnt succed,
please advise.

[David_854]

Mahmoud,
Have you checked the best practices site?

Internet Express is a collection of popular Open Source and Compaq
software contained on a single CDâ ROM. FireScreen is a component of the
Compaq Administration utility provided with Internet Express. You can
use FireScreen to configure and manage the screening router (or firewall)
called screend. FireScreen uses screening rules stored in its configuration
file to filter routed packets by inhibiting the IPâ forwarding functionality
built into the kernel. This kernel feature is called the "Gateway packet
screening facility". It is described in detail in screen(2).
http://h30097.www3.hp.com/docs/best_practices/OSIS_BPS/OSIS_56/FIRESCREEN/BP-firescreen.pdf

[mahmoud_4]

Hi David,
many thanks to your reply,
I do the steps in best practis when I test the screenfire it dosnt do any thing
example I try this;

for 192.168.0.0 netmask is 255.255.255.0;
between host 192.168.11.11 tcp port ftp and any reject;
between host 192.168.11.11 tcp port ssh and any reject;

default reject;
when I try to (ftp,ssh) from 192.168.11.11 to any host it works
please advise.