Shutting off ports on one interface only

[Anonymous]

Is there a way to do this? Like say I want to allow ftp services to one interface but not on the other. Do I need to install TCP_Wrappers or something or can this be setup out of the box?

Thanks
Mark

[Detrius]

You can add custom firewall modifications to the file /etc/ipfilter/ipfw.conf

See the ipfw man page for how to write up the rule.

What I would recommend is to not allow ftp at all in the ServerAdmin app and then manually open up the port for one ethernet interface. Make sure that you do have the rules enabled to deny all if it a packet isn’t specifically allowed–which is the default configuration.

Instead of shutting off ports on one interface, you are opening them on the other (same end result, but different approach).

[Author]

Posts