How to Add rules to IP Filter (Firewall in SCO)

up vote
4
down vote

favorite

I need to add a rule (allow any to any port 22) to my firewall, so that I can ssh remotely into my machine.

I have had a look in the SCO OSR600 Documentation and I cannot find anything in there.

Update

I have managed to enable ipfstat:

#ipfstat enable

And now my firewall is active, I just need to add rules now.

But where do I find the rules text file?

edited Nov 20 at 20:33

Rui F Ribeiro

38.2k1475125

asked Jul 25 '12 at 15:16

Kevdog777

2,082123259

I am currently looking for the ipf config file, but can't find it.
– Kevdog777
Jul 26 '12 at 12:45

add a comment |

up vote
4
down vote

favorite

I need to add a rule (allow any to any port 22) to my firewall, so that I can ssh remotely into my machine.

I have had a look in the SCO OSR600 Documentation and I cannot find anything in there.

Update

I have managed to enable ipfstat:

#ipfstat enable

And now my firewall is active, I just need to add rules now.

But where do I find the rules text file?

edited Nov 20 at 20:33

Rui F Ribeiro

38.2k1475125

asked Jul 25 '12 at 15:16

Kevdog777

2,082123259

I am currently looking for the ipf config file, but can't find it.
– Kevdog777
Jul 26 '12 at 12:45

add a comment |

up vote
4
down vote

favorite

I need to add a rule (allow any to any port 22) to my firewall, so that I can ssh remotely into my machine.

I have had a look in the SCO OSR600 Documentation and I cannot find anything in there.

Update

I have managed to enable ipfstat:

#ipfstat enable

And now my firewall is active, I just need to add rules now.

But where do I find the rules text file?

edited Nov 20 at 20:33

Rui F Ribeiro

38.2k1475125

asked Jul 25 '12 at 15:16

Kevdog777

2,082123259

I need to add a rule (allow any to any port 22) to my firewall, so that I can ssh remotely into my machine.

I have had a look in the SCO OSR600 Documentation and I cannot find anything in there.

Update

I have managed to enable ipfstat:

#ipfstat enable

And now my firewall is active, I just need to add rules now.

But where do I find the rules text file?

ssh firewall sco openserver

edited Nov 20 at 20:33

Rui F Ribeiro

38.2k1475125

asked Jul 25 '12 at 15:16

Kevdog777

2,082123259

edited Nov 20 at 20:33

Rui F Ribeiro

38.2k1475125

asked Jul 25 '12 at 15:16

Kevdog777

2,082123259

edited Nov 20 at 20:33

Rui F Ribeiro

38.2k1475125

edited Nov 20 at 20:33

Rui F Ribeiro

38.2k1475125

edited Nov 20 at 20:33

Rui F Ribeiro

38.2k1475125

asked Jul 25 '12 at 15:16

Kevdog777

2,082123259

asked Jul 25 '12 at 15:16

Kevdog777

2,082123259

asked Jul 25 '12 at 15:16

Kevdog777

2,082123259

I am currently looking for the ipf config file, but can't find it.
– Kevdog777
Jul 26 '12 at 12:45

add a comment |

I am currently looking for the ipf config file, but can't find it.
– Kevdog777
Jul 26 '12 at 12:45

I am currently looking for the ipf config file, but can't find it.
– Kevdog777
Jul 26 '12 at 12:45

add a comment |

2 Answers
2

active

oldest

votes

up vote
2
down vote

accepted

Probably the rule, should be:

pass in quick proto tcp from any to any port = 22 keep state 
pass out quick proto tcp from any to any port = 22 keep state

in /etc/ipf.conf

edited Jul 29 '12 at 21:03

answered Jul 29 '12 at 20:54

tombolinux

34727

Do you think I should try the same but for like port 80 and 81 as well? Or is that already included (default)? - I haven't tried adding the rules, just got into work now.
– Kevdog777
Jul 30 '12 at 7:40

I just tried going in to the /etc/ipf.conf file, and it says it is a new file. I did this in both my user and root profile.
– Kevdog777
Jul 30 '12 at 7:49

1

AWESOME, thank you, it has worked ... FINALLY!!!
– Kevdog777
Jul 30 '12 at 8:11

I think that you, like me in the past, need a firewall editor. I suggest you to use fwbuilder fwbuilder.org
– tombolinux
Jul 31 '12 at 16:18

1

fwbuilder is a gui client for windows or linux. It helps you to generate the configuration for your firewall, then you can upload it to your server via sftp.
– tombolinux
Aug 1 '12 at 9:30

|
show 2 more comments

up vote
1
down vote

Would think you add them the same as you would with iptables. Here is a quick doc on IPF though. http://www.freebsd.org/doc/handbook/firewalls-ipf.html

answered Jul 28 '12 at 18:41

stlsaint

312

Thank you for your answer, but that site is for FreeBSD, and OK it might help a bit, but reading through that gave me a headache in the first place.
– Kevdog777
Jul 30 '12 at 7:57

add a comment |

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);

);

draft saved

draft discarded

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f43942%2fhow-to-add-rules-to-ip-filter-firewall-in-sco%23new-answer', 'question_page');

);

Post as a guest

Name

Required, but never shown

2 Answers
2

active

oldest

votes

2 Answers
2

active

oldest

votes

up vote
2
down vote

accepted

Probably the rule, should be:

pass in quick proto tcp from any to any port = 22 keep state 
pass out quick proto tcp from any to any port = 22 keep state

in /etc/ipf.conf

edited Jul 29 '12 at 21:03

answered Jul 29 '12 at 20:54

tombolinux

34727

Do you think I should try the same but for like port 80 and 81 as well? Or is that already included (default)? - I haven't tried adding the rules, just got into work now.
– Kevdog777
Jul 30 '12 at 7:40

I just tried going in to the /etc/ipf.conf file, and it says it is a new file. I did this in both my user and root profile.
– Kevdog777
Jul 30 '12 at 7:49

1

AWESOME, thank you, it has worked ... FINALLY!!!
– Kevdog777
Jul 30 '12 at 8:11

I think that you, like me in the past, need a firewall editor. I suggest you to use fwbuilder fwbuilder.org
– tombolinux
Jul 31 '12 at 16:18

1

fwbuilder is a gui client for windows or linux. It helps you to generate the configuration for your firewall, then you can upload it to your server via sftp.
– tombolinux
Aug 1 '12 at 9:30

|
show 2 more comments

up vote
2
down vote

accepted

Probably the rule, should be:

pass in quick proto tcp from any to any port = 22 keep state 
pass out quick proto tcp from any to any port = 22 keep state

in /etc/ipf.conf

edited Jul 29 '12 at 21:03

answered Jul 29 '12 at 20:54

tombolinux

34727

Do you think I should try the same but for like port 80 and 81 as well? Or is that already included (default)? - I haven't tried adding the rules, just got into work now.
– Kevdog777
Jul 30 '12 at 7:40

I just tried going in to the /etc/ipf.conf file, and it says it is a new file. I did this in both my user and root profile.
– Kevdog777
Jul 30 '12 at 7:49

1

AWESOME, thank you, it has worked ... FINALLY!!!
– Kevdog777
Jul 30 '12 at 8:11

I think that you, like me in the past, need a firewall editor. I suggest you to use fwbuilder fwbuilder.org
– tombolinux
Jul 31 '12 at 16:18

1

fwbuilder is a gui client for windows or linux. It helps you to generate the configuration for your firewall, then you can upload it to your server via sftp.
– tombolinux
Aug 1 '12 at 9:30

|
show 2 more comments

up vote
2
down vote

accepted

Probably the rule, should be:

pass in quick proto tcp from any to any port = 22 keep state 
pass out quick proto tcp from any to any port = 22 keep state

in /etc/ipf.conf

edited Jul 29 '12 at 21:03

answered Jul 29 '12 at 20:54

tombolinux

34727

Probably the rule, should be:

pass in quick proto tcp from any to any port = 22 keep state 
pass out quick proto tcp from any to any port = 22 keep state

in /etc/ipf.conf

edited Jul 29 '12 at 21:03

answered Jul 29 '12 at 20:54

tombolinux

34727

edited Jul 29 '12 at 21:03

answered Jul 29 '12 at 20:54

tombolinux

34727

answered Jul 29 '12 at 20:54

tombolinux

34727

answered Jul 29 '12 at 20:54

tombolinux

34727

Do you think I should try the same but for like port 80 and 81 as well? Or is that already included (default)? - I haven't tried adding the rules, just got into work now.
– Kevdog777
Jul 30 '12 at 7:40

I just tried going in to the /etc/ipf.conf file, and it says it is a new file. I did this in both my user and root profile.
– Kevdog777
Jul 30 '12 at 7:49

1

AWESOME, thank you, it has worked ... FINALLY!!!
– Kevdog777
Jul 30 '12 at 8:11

I think that you, like me in the past, need a firewall editor. I suggest you to use fwbuilder fwbuilder.org
– tombolinux
Jul 31 '12 at 16:18

1

fwbuilder is a gui client for windows or linux. It helps you to generate the configuration for your firewall, then you can upload it to your server via sftp.
– tombolinux
Aug 1 '12 at 9:30

|
show 2 more comments

Do you think I should try the same but for like port 80 and 81 as well? Or is that already included (default)? - I haven't tried adding the rules, just got into work now.
– Kevdog777
Jul 30 '12 at 7:40

I just tried going in to the /etc/ipf.conf file, and it says it is a new file. I did this in both my user and root profile.
– Kevdog777
Jul 30 '12 at 7:49

1

AWESOME, thank you, it has worked ... FINALLY!!!
– Kevdog777
Jul 30 '12 at 8:11

I think that you, like me in the past, need a firewall editor. I suggest you to use fwbuilder fwbuilder.org
– tombolinux
Jul 31 '12 at 16:18

1

fwbuilder is a gui client for windows or linux. It helps you to generate the configuration for your firewall, then you can upload it to your server via sftp.
– tombolinux
Aug 1 '12 at 9:30

Do you think I should try the same but for like port 80 and 81 as well? Or is that already included (default)? - I haven't tried adding the rules, just got into work now.
– Kevdog777
Jul 30 '12 at 7:40

I just tried going in to the /etc/ipf.conf file, and it says it is a new file. I did this in both my user and root profile.
– Kevdog777
Jul 30 '12 at 7:49

AWESOME, thank you, it has worked ... FINALLY!!!
– Kevdog777
Jul 30 '12 at 8:11

I think that you, like me in the past, need a firewall editor. I suggest you to use fwbuilder fwbuilder.org
– tombolinux
Jul 31 '12 at 16:18

fwbuilder is a gui client for windows or linux. It helps you to generate the configuration for your firewall, then you can upload it to your server via sftp.
– tombolinux
Aug 1 '12 at 9:30

|
show 2 more comments

up vote
1
down vote

Would think you add them the same as you would with iptables. Here is a quick doc on IPF though. http://www.freebsd.org/doc/handbook/firewalls-ipf.html

answered Jul 28 '12 at 18:41

stlsaint

312

Thank you for your answer, but that site is for FreeBSD, and OK it might help a bit, but reading through that gave me a headache in the first place.
– Kevdog777
Jul 30 '12 at 7:57

add a comment |

up vote
1
down vote

Would think you add them the same as you would with iptables. Here is a quick doc on IPF though. http://www.freebsd.org/doc/handbook/firewalls-ipf.html

answered Jul 28 '12 at 18:41

stlsaint

312

Thank you for your answer, but that site is for FreeBSD, and OK it might help a bit, but reading through that gave me a headache in the first place.
– Kevdog777
Jul 30 '12 at 7:57

add a comment |

up vote
1
down vote

Would think you add them the same as you would with iptables. Here is a quick doc on IPF though. http://www.freebsd.org/doc/handbook/firewalls-ipf.html

answered Jul 28 '12 at 18:41

stlsaint

312

Would think you add them the same as you would with iptables. Here is a quick doc on IPF though. http://www.freebsd.org/doc/handbook/firewalls-ipf.html

answered Jul 28 '12 at 18:41

stlsaint

312

answered Jul 28 '12 at 18:41

stlsaint

312

answered Jul 28 '12 at 18:41

stlsaint

312

answered Jul 28 '12 at 18:41

stlsaint

312

Thank you for your answer, but that site is for FreeBSD, and OK it might help a bit, but reading through that gave me a headache in the first place.
– Kevdog777
Jul 30 '12 at 7:57

add a comment |

Thank you for your answer, but that site is for FreeBSD, and OK it might help a bit, but reading through that gave me a headache in the first place.
– Kevdog777
Jul 30 '12 at 7:57

Thank you for your answer, but that site is for FreeBSD, and OK it might help a bit, but reading through that gave me a headache in the first place.
– Kevdog777
Jul 30 '12 at 7:57

add a comment |

draft saved

draft discarded

draft saved

draft discarded

Post as a guest

Name

Required, but never shown

Name

Required, but never shown

Name

Required, but never shown

搜尋此網誌

mjhjmtu