Text 7193, 70 rader
Skriven 2006-08-18 23:13:00 av WAYNE CHIRNSIDE (1:123/140)
     Kommentar till en text av MARTIN ATKINS
Ärende: Re: firewall
====================
-=> MARTIN ATKINS wrote to WAYNE CHIRNSIDE <=-

 -=> WAYNE CHIRNSIDE wrote to MARTIN ATKINS <=-

 WC> I want to thank you Martin for the firewall script you sent along.
 WC> A tad less complex ( appearing to me) than the one Paul posted.

 WC> After several days of standing down from Linux I ran it and hit
 WC> www.grc.com
 WC> running shieldsup
 WC> which reported all ports stealthed.
 WC> Only failed the ping test but as you noted
 WC> sufficient for dialup.

 WC> Much appreciated.

 MA> Glad you found it easier to comprehend. You say it failed on ping
 MA> but you don't say in what way.

Shieldsup report said my system acknowledged the ping thus was
vulnerable to hackers by advertising I'm there to be hacked should they
so desire.

 MA> If you want to allow ping from the
 MA> net. Then comment out the two last lines and add this.

The reverse actually.
Just reran the test, perfect score at www.grc.com
Thanks.
Passed all tests.
Massive relief here.

 MA> $IPTABLES -A INPUT -i $INET_IFACE -p icmp -j ACCEPT

 MA> To reject all pings from the net comment out the above line like this.

 MA> #$IPTABLES -A INPUT -i $INET_IFACE -p icmp -j ACCEPT

 MA> Also that script is technically wrong in that it was written for a
 MA> machine with more than 256 ram. This alters one of the variables.

I've got more than 256 RAM.
384Meg in fact but believe the video card snags some of that.

 MA> # As in /proc/sys/net/ipv4/ip_local_port_range.
 MA> LOCAL_PORTS="3276:61000"

 MA> Should read.

 MA> LOCAL_PORTS="1024:4999"

This for 256?

 MA> Now you've slowed down a little, here is an excellent leisurely read.

 MA> Oskar Andreasson
 MA> Iptables Tutorial

 MA> iptables-tutorial.html.tgz   (2.1 MB)

 MA> or

 MA> iptables-tutorial.src.tgz    (4.0 MB)

 Well I'm done for the day, maybe tomorrow as well.
 I get on a productive run, overextend myself and have to kick back.
 This is saved to my OLR's save directory for later action.
 I'll snag the tutorials in a day or two.
--- Platinum Xpress/Win/WINServer v3.0pr5
 * Origin: Try Our Web Based QWK: DOCSPLACE.ORG (1:123/140)