Home / server / Questions / 155094
Accepted
Owen
Asked: 2010-06-27 05:33:39 +0800 CST

CSF firewal - how does csf.allow work?

  • 772

In my csf.allow file I have (something like):

98.765.43.21
tcp:in:d=20:s=12.345.67.89
tcp:in:d=21:s=12.345.67.89

Am I right in thinking that this will 1) always allow any service for 98.765.43.21 2) deny incoming FTP connections on tcp ports for all IPs except 12.345.67.89 ?

The first IP (98.765.43.21) does not seem to deny anything, while the second two definitions seems to deny all other IPs from accessing those specified services. Is this correct?

firewall

1 Answers

  1. Best Answer

    Yes you're right, some examples taken from the readme.txt:

    # TCP connections inbound to port 3306 from IP 11.22.33.44
tcp:in:d=3306:s=11.22.33.44

# TCP connections outbound to port 22 on IP 11.22.33.44
tcp:out:d=22:d=11.22.33.44

If omitted, the default protocol is set to "tcp", the default connection
direction is set to "in"
    • 1