Ser dette ipfw-script ikke umiddelbart ret sikkert ud?
add check-stateadd deny log logamount 10 tcp from any to any established
add allow tcp from 194.239.16x.xx to any keep-state out setup
add allow udp from 194.239.16x.xx to any keep-state out
# services
add allow tcp from any to 194.239.16x.xxx ftp keep-state
add allow tcp from any to 194.239.16x.xxx ssh keep-state
add allow tcp from any to 194.239.16x.xxx smtp keep-state
add allow tcp from any to 194.239.16x.xxx http keep-state
add allow tcp from any to 194.239.16x.xxx https keep-state
add deny log logamount 10 ip from any to any
Har I eventuelt forslag til ændringer?
Mvh Anthony