[CentOS] This firewall rule will self-destruct

[John Summerfield]

Benjamin Smith wrote:
> On Friday 16 March 2007, MrKiwi wrote:
> 
>>mitigate a situation 
>>where you have no control over an intermediate firewall that 
>>only passes port 80
> 
> 
> Yes, that's EXACTLY what I'm trying to do... but I dont' see how this exactly 


You will have a race condition.

You could, maybe, enable the DNAT for the source IP of the http request, 
that would alleviate both the race condition and the urgency to turn of off.

Also, you might be better enabling ssh through which you can more 
cleanly pipe your steaming hot VNC.

Or negotiate a clean pass with your network administrator; such folk 
tend to take a very dim view of those who would circumvent the rules.





-- 

Cheers
John

-- spambait
1aaaaaaa at coco.merseine.nu  Z1aaaaaaa at coco.merseine.nu

Please do not reply off-list