Solved

IPX Filtering, Blocking with linux

Posted on 1997-09-07
4
261 Views
Last Modified: 2010-03-18
NETWARE SRVR ----LINUX -----NETWARE SRVR
(A)--------------IPFWADM,IPX-------B

We have IPFWADM set up in a way that users on side B can
use all of the network resources on side A.  But Side A
cannot see side B at all.
We would like to be able to do the same with IPX.  Somehow be able to filter it, so that users on side B would be able to see all servers and use resources on side A but side A would not be able to see anything on side B.  

Can someone explain how to set this up in linux, what software to use etc.

Thanks
***Points will be increased if this turns out to be a hard
question or if somebody requests it
0
Comment
Question by:mark21
  • 3
4 Comments
 

Author Comment

by:mark21
ID: 1586471
Edited text of question
0
 

Author Comment

by:mark21
ID: 1586472
Edited text of question
0
 

Author Comment

by:mark21
ID: 1586473
Edited text of question
0
 
LVL 1

Accepted Solution

by:
jantypas earned 70 total points
ID: 1586474
Unfortunately, I know of no package on the Linux that performs IPX/SPX fitler tasks -- plenty that do IP but not IPX.  Remember, IP protocol knowledge was plublic knowledge, IPX required $$$ to get it...

Hate to say it, but $1000 will buy a Cisco 2501 that will exactly what you want and it's rock solid.

If you were adventurous, you could MODIFY the ip filter code to do it... you'd have to do something like this:

- Using the bpf-style fitlers in the kernel, have each filter watch for an IPX SAP.  If it finds it, check against a clist in the kernel filled with "allowed" stations.  If it finds a match, pass the frame, otherwise drop it.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now