Very Computer

My Setup as follows

(outside)---------(inside)-------(dmz)-----------------(dmz)--------(inside)
[Firewall-1] -------------------------------------------- [Firewall 2]

Both the firewall are configured in routing mode. My requirement
system A from inside of firewall1 to talk to inside system B of
firewall 2.

My rule .......
Firewall -1
allow telnet system A to System B (Not the exact syntax)
deny rest

Firewall-2
What rule should I configure?

Cheers

| My Setup as follows
|
|
| (outside)---------(inside)-------(dmz)-----------------(dmz)--------(inside)
| [Firewall-1] -------------------------------------------- [Firewall 2]
|
| Both the firewall are configured in routing mode. My requirement
| system A from inside of firewall1 to talk to inside system B of
| firewall 2.
|
| My rule .......
| Firewall -1
| allow telnet system A to System B (Not the exact syntax)
| deny rest
|
| Firewall-2
| What rule should I configure?

It at least requires the same rule. Talking about TCP connections this
ensure ONLY that A can establish a connection to B, not the opposite
direction. The answers will reach a as both firewalls handle this stateful.
If B needs to establish a connection too then add similar roles.
All this assumes you don't use NAT

Hope that helps
Thomas

-----------------------------------------------------------------
PGP fingerprint: B1 EE D2 39 2C 82 26 DA  A5 4D E0 50 35 75 9E ED

if both internal networks are rfc internal addresses you will have to
setup address translations to allow the traffic from the inside to
travel outside. on the second system you will have to all an external
address to access the internal network

so your nat rule will be
internal host -> internet -> use address ...

on the other machine it will be
anything to address internet traffic -> send to internal host

then write a rule saying anything to internet address on port accept