Very Computer

> > Hi all!

> > Does anybody know, how i can tell Linux the following:

> > I have two network devices, eth0 and eth1, eht1 ist connected to my ADSL Modem,
> > eth0 to my intertnal network! Some services i want to use only internal, for example
> > ftp. So, what i have to do, that the ftp server only listens to request from the internal network??

> What distribution are you using? If it's a recent Red Hat or Mandrake
> (both of which use xinetd rather than inetd), you can configure your
> /etc/xinetd.d/ftp file so that the service definition includes the
> following:

>      interface = {your.internal.ip.address}

> Replace "{your.internal.ip.address}" with your system's internal IP
> address. This will cause xinetd to bind that service only to the network
> adapter associated with that IP address. Unfortunately, inetd won't do
> this.

> Another option is to erect a firewall using ipchains or iptables. Check
> the appropriate HOWTO documents for more information. The Linux Fiewall
> Tools Web site, http://linux-firewall-tools.com/linux/, is also a
> useful resource. In fact, setting up a firewall is something I'd
> recommend for ANY system that's connected directly via a DSL or cable
> modem.

> > or you could simply put ALL:ALL in your /etc/hosts.deny file and
> > ALL:{your.internal.ip.address} in /etc/hosts.allow.  This is most

> Does this apply to _every_ service running on a system? I remember
> reading something about this only applying to services run with
> tcp wrappers or something.

> Regards
> - Jacob