Re: iptables Question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, 2005-08-27 at 00:38 +0900, Mark Sargent wrote:
> Hi All,
> 
> today/tonight, I've been looking at iptables more deeply. I use 
> firestarter, and correct me if I'm wrong, it is a gui for iptables, 
> yes..? Below are the rules for input shown from iptables -L -v,
> 

> I'm rather curious about the 1st 2,
> 
> 0 0 ACCEPT tcp -- any any warpstar-62a102 anywhere tcp 
> flags:!SYN,RST,ACK/SYN
> 24 3341 ACCEPT udp -- any any warpstar-62a102 anywhere
> 
> as that is the hostname of my sharemate's adsl router. Is that due to 
> DHCP.? Also see similar in outbound,
> 
Hard to tell. Use iptables -L -n -v. May I suggest?:

        Use webmin as a netfilter GUI.
        Create a chain "junk" with two rules; log and drop

Just dropping packets without any print to messages is really not a very
good idea.
-- 
Tired of spam? Do YOUR part: http://www.BoulderPledge.org
Our DNSRBL - Eliminate Spam: http://www.TQMcube.com/spam_trap.htm
              RBLDNSD HowTo: http://www.TQMcube.com/rbldnsd.htm
            Multi-RBL Check: http://www.TQMcube.com/rblcheck.htm


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux