Installation manual

Cyclades-TS
56
Appendix A - Linux
Installation Manual
incoming packet filtering. The packet is either destined for the router or for another computer. In the latter case,
the packet is processed by the forward chain. Packets that pass through the forward chain will then be processed
by the output chain.
source and destination have the following format:
[!]
address [/ mask ] [!][ port [: port ]]
! : reverses the definition, resulting in the opposite.
address : host or network IP
port : defines a specific port
port:port : defines a range of ports
If a source or destination is not specified then 0.0.0.0/0 is used.
protocol is one of the following:
tcp, udp, icmp, all or a protocol number (see the file /etc/protocols for a list).
target is one of the following:
ACCEPT
DENY
the name of another chain
interface is:
eth0 (the Ethernet interface is the only option on the Cyclades-TS) Lists do not need to be associated to an
interface, so this option may be omitted.
To save changes made using the ipchains command, execute fwset. This command will save the filter
configuration in the file /etc/network/firewall and then save the file in flash memory.
To delete the changes made (before fwset is executed) execute fwset restore to return to the lists previously
saved in /etc/network/firewall. Only the lists previously saved using fwset will then be defined. This command is
executed at boot to invoke the last configuration saved.