Dear managers,
I am looking into the possibility of implementing screend for pactet filtering
in alpha-255 workstation running DU 4.0E with only 1 network card. My purpose to
accomplish is to filter out unwanted IP packets into this host, just like the
running IP Filter in Sun Solaris for similar purpose.
The README file requires us to run routed. Is it really needed ?
Does anyone succeed with running screend in similar configuration.
Appended is my steps in running screend , please kindly point me out on any error.
Thanks in advance for your help,
Regards,
Phyllis
I have rebuilt our kernel with the following options :
pseudo-device gwscreen
/etc/screend.conf is built and includes the rules for filtering unwanted tcp pactets.
Then run :
screenmode on
screend -l -d -L /var/log/screend
However, No packet is rejected as suggested in my screend.conf. The result of screendstat :
total packets screened: 0
total accepted: 0
total rejected: 0
packets dropped:
because buffer was full: 0
because user was out of sync: 0
because too old: 0
total dropped: 0
--
Phyllis H.M.Leung(Assistant Computer Officer)
http://www.se.cuhk.edu.hk/~hmleung
Dept. of SE&EM,The Chinese University of Hong Kong
Received on Fri Dec 10 1999 - 02:57:30 NZDT