Service Screening

Define the Source and Destination ports for each service. This alters only the internal and perimeter network.
The configuration-file is 'etc/config/<service>.flt'.

The "Intern" field must contain the innermost (internal net -> perimeter net -> internet) host!
(maybe this will be fixed in the future).

Service
Intern Extern Direction

Example:
You want to be able to telnet any host in the internet from your domain. But telnet towards your domain is only via the Gateway possible. This means that you have to setup the following definitions:
Intern Extern  Direction 
$internal $PERIMETER  $any Outgoing
$GW $any Incoming
$internal $GW Incoming
(The ´Outgoing´ direction defines ´Intern -> Extern´)


(c) 1998 J. Hellmerichs-Friedrich