|
Don't you wish there was an easy way to set up port forwarding and other
firewall / routing rules in your magnia? When Toshiba released the
upgraded SG30, they didn't just upgrade the hardware! They added the
ability for the user to edit firewall rules. I don't know why they haven't
made this upgrade available to SG20 users. It does seem to work
fine. For all I know there is a fatal flaw, however, so keep that in mind.
Upgrading your SG20 Firewall rules and adding port forwarding.
This process does work, port forwarding does work. The following have been
verified as issues:
IPSec VPN no longer works. PPTP unaffected. FIX
AVAILABLE
(IPSEC interface ipsec0 incorrectly labeled as ipsec1 in IPTABLES)
Any issues found will be addressed here:
Fixes for Firewall Rules Update
Following these steps will not JUST give you the
ability to edit I/O rules and Port Forwarding. It will also FUNDAMENTALLY
change the structure of your firewall to a newer version.
Step 1: Delete all rules (directories) from /sa2/firewall.
WebMin -> Others -> File Manager
Step 2: You might want to BACK UP your system!
8282 -> System -> 2nd Disk -> Take Snapshot
Step 3: Install the four RPM's.
WebMin -> System -> Software Packages
You may
download the RPM's here.
Sa2_enLangEnWebAdmin3000network2000firewall 3.0.0-1
NetFirewallRULES 2.0.10-1
NetFirewallMW 2.0.60-1
NetFirewallUI 2.0.8-1 *** checkbox "Ignore Dependencies"
Now go to 8282 -> Network -> Firewall -> Customize
The RPM's are from Toshiba. Since you cannot use them without an SA2
scripting administration interface already installed, I don't think it violates
any copyrights or license agreements for me to make these available. If,
however, Toshiba requests that I remove the files or article, I will do so.
AGAIN: YOU CANNOT USE THESE RPM'S UNLESS YOU HAVE AN
SA2 PACKAGE LIKE THE ONE PICTURED ABOVE. LARGE NUMBERS OF CRITICAL FILES
ARE NOT INCLUDED HERE. Files affected by this patch:
/sa2/web/admin/3000network/2000firewall/ ENTIRE
/sa2/triggers/started/lcdmsg/32firewall
/sa2/triggers/network/mod_ip/20ipchains
/sa2/triggers/mod_firewall/10iptables
/sa2/triggers/mod_firewall/20lcdmsg
/sa2/triggers/firstboot/11firewall_defaults
/sa2/triggers/common/ipchains
/sa2/templates/etc/sysconfig/iptables.sh/ ENTIRE
/sa2/templates/etc/rc.d/init.d/iptables/ ENTIRE
/sa2/lib/site_perl/SA/Network/Firewall.pm
/sa2/lang/en/web/admin/3000network/2000firewall/ ENTIRE
/sa2/firewall ENTIRE Remember: Questions
can be posted in the FORUM section !
|