FlashFXP Forums - View Single Post - getting around a nokia checkpoint NAT firewall

maturus2523 · 12-09-2003, 02:17 PM

Yeah, I checked that out because I saw the thing in the knowledge base. Although I navigated just fine through the .ini (at least, for a noob) I couldn't really understand the host file to well. This is what I've got, are there any mistakes?

# Default policy
#
# POLICY ACCEPT CONNECTIONS_PER_IP
# POLICY DENY
#

# Uncomment the ACCEPT line, and comment the DENY line
# *** when you changed the default ioFTPD password! ***

POLICY ACCEPT 2
# POLICY DENY

# Classes
#
# CLASS CLASS_NAME TOTAL_CONNECTIONS_PER_CLASS
CLASS NORDIC 25
CLASS ADMIN -1

# Rules
#
# ACCEPT I|H IP|HOSTNAME CLASS_NAME CONNECTIONS_PER_IP
# DENY I|H IP|HOSTNAME LOG_STRING
#

ACCEPT I 192.168. ADMIN -1
ACCEPT I 127.0.0. ADMIN -1
ACCEPT I 172.16. ADMIN -1
ACCEPT I 10. ADMIN -1
ACCEPT H .fi NORDIC 2
ACCEPT H .se NORDIC 1
ACCEPT H .no NORDIC 1
DENY I 16.3.4 "Banned network address"
DENY H .tw "Access from taiwan is prohibited"

12-09-2003, 02:17 PM
maturus2523 Junior Member Join Date: Dec 2003 Posts: 7	Yeah, I checked that out because I saw the thing in the knowledge base. Although I navigated just fine through the .ini (at least, for a noob) I couldn't really understand the host file to well. This is what I've got, are there any mistakes? # Default policy # # POLICY ACCEPT CONNECTIONS_PER_IP # POLICY DENY # # Uncomment the ACCEPT line, and comment the DENY line # * when you changed the default ioFTPD password! * POLICY ACCEPT 2 # POLICY DENY # Classes # # CLASS CLASS_NAME TOTAL_CONNECTIONS_PER_CLASS CLASS NORDIC 25 CLASS ADMIN -1 # Rules # # ACCEPT I\|H IP\|HOSTNAME CLASS_NAME CONNECTIONS_PER_IP # DENY I\|H IP\|HOSTNAME LOG_STRING # ACCEPT I 192.168. ADMIN -1 ACCEPT I 127.0.0. ADMIN -1 ACCEPT I 172.16. ADMIN -1 ACCEPT I 10. ADMIN -1 ACCEPT H .fi NORDIC 2 ACCEPT H .se NORDIC 1 ACCEPT H .no NORDIC 1 DENY I 16.3.4 "Banned network address" DENY H .tw "Access from taiwan is prohibited"