Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| firewall:example_4 [2010/11/04 13:58] – tibor | firewall:example_4 [2010/11/04 14:00] (current) – tibor | ||
|---|---|---|---|
| Line 35: | Line 35: | ||
| **8.** The **incoming user rules** of the **ET4** interface also allow the packet through, as it goes to the 192.168.0.x subnet: | **8.** The **incoming user rules** of the **ET4** interface also allow the packet through, as it goes to the 192.168.0.x subnet: | ||
| - | | daddr == 192.168.50.1/ | + | | daddr == 192.168.50.1/ |
| **9.** The router sends the packet to ET1 as it is that interface that handles the 192.168.0.x subnet. | **9.** The router sends the packet to ET1 as it is that interface that handles the 192.168.0.x subnet. | ||
| Line 44: | Line 44: | ||
| Now all data flows headed to %%www.yourcompany.com%% are “hijacked" | Now all data flows headed to %%www.yourcompany.com%% are “hijacked" | ||
| + | |||
| + | ===== Entering the rule ===== | ||
| + | You enter the rule of step 2 above into the " | ||
| + | | ET1 | Incoming user | post | daddr == %%www.yourcompany.com%% modify static daddr 192.168.10.31 | | ||
| + | All other necessary rules are already present in the standard firewall ruleset. | ||
| + | |||
