screend.conf - help an idiot

From: Terry <td3201_at_yahoo.com>
Date: Wed, 16 Apr 2003 15:13:30 -0700 (PDT)

First off, thank you for your help in deciding on the
best path. Building the kernel for screend was easy.

I am trying to write a decent screend.conf file for my
needs. Here is what I have:

# Default action
default reject;

# Subnet declarations
for 10.20.0.0 netmask is 255.255.255.0;
for 192.168.0.0 netmask is 255.255.255.0;

# ICMP actions
between any and subnet 10.20.1.0 icmp type any accept;
between any and subnet 192.168.2.0 icmp type any
accept;

# Other actions
between subnet 192.168.2.0 and subnet 10.20.1.0
accept;



I am unable to ping from the two subnets stated above,
or more specifically, between these hosts:

192.168.2.8 <--> 10.20.1.2

I cannot figure out why. I turned on debugging and it
basically says that the packet is rejected (duh). I
believe my issue lies within my subnet
declarations...any ideas?

Thank you!

=====
Terry

__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com
Received on Wed Apr 16 2003 - 22:14:10 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:44 NZDT