[zorp-hu] inbound service not permitted....

Wed, 24 Apr 2002 11:34:45 +0200

On Wed, Apr 24, 2002 at 11:29:20AM +0200, Balazs Scheidler wrote:

> bejovo kapcsolatnal a zorp mindig a legspecifikusabb zonat keresi, ami az
> adott IP-t tartalmazza. Tehat ha szerinted nem jo zonat talal meg, akkor nem
> vettel fel olyan zonat, ami az adott ip-t tartalmazza.

InetZone("site-net", "192.168.20.0/24",
         # list of allowed outbound services, '*' matches anything
	          outbound_services=["intra_http", "intra_ftp", "intra_cvs"],

         # list of allowed inbound services, '*' matches anything
	          inbound_services=[]),

InetZone("local", "127.0.0.0/8",
	        inbound_services=["*"],
	        outbound_services=[]),

InetZone("internet", "0.0.0.0/0",
		inbound_services=["*"],
		outbound_services=[])

Két if van eth0: 10.0.x.x, eth1:192.168.20.254
Az eth0 a kulso az eth1 a belso oldal.
A 10.0.x.x nem esik bele a 0.0.0.0/0 -ba ?

-- 
George