I NEED HELP FROM THE NETWORK GURU's!!! SPEEDSTREAM QUESTION

phenderson

Diamond Member
Jan 10, 2003
3,469
0
76
OK folks, I can program a cisco firewall or router backwards and forwards, 2500 series, Pix, 2600 series, you name it, I can do it...

WELLLLLLL

I recently bought and Efficient Networks 5861 DSL 4-port router\firewall

It is much more difficult and time consuming to program. I need help programming this thing. Someone please help me...

I have 3 preset firewall scripts to edit (using the configuration manager):

Simple
Medium
Maximum

I know how to edit these scripts and upload them to the router, but I just do not know how to put together the lines needed to allow port access, or rather, I just don't want to learn Speedstream command interface...

I have tried reading through the documentation supplied by their support, but it just does not get it done...

I need these ports opened...

SMTP 25
POP 110
WWW 80
PPTP
Telnet 23
Terminal Services 3389

if anyone can cut and paste these lines into a reply in this thread or PM to me, I would greatly appreciate it.


My router NAT's whatever ip address Bellsouth provides via PPPOA
 

subflava

Senior member
Feb 8, 2001
280
0
0
You sure those documents are no help? I looked at the titles just now and the one that says, "IP filtering concepts" seems relevant to me. I opened it up and sure enough it gives me the syntax (Example below). Seems pretty straightforward to me. Just copy the lines and edit the ports you need. If I remember correctly, the packet filter does accept specific IP's also.


---------------------------------------------------------------------
4. CONTROL TELNET ACCESS

The following ipfilter rule example will allow telnet access to the router from the LAN or the WAN. The first two rules allow telnet access from the LAN to the WAN.The second two rules allow telnet access from the WAN to the LAN. The last rule is used to prevent telnet access to the router or WAN from users on the LAN of a specific IP, or range of LAN IP addresses.

? remote ipfilter insert output accept -p tcp -dp 23
? remote ipfilter insert input accept -p tcp -sp 23
? remote ipfilter insert input accept -p tcp -dp 23
? remote ipfilter insert output accept -p tcp -sp 23
? eth ip filter insert input drop -p tcp -dp 23 -sa <1st lan ip addr>:
----------------------------------------------------------------------