Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Firewalls
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: Minimal secure iptables firewall

from [Harry Bobbaers] Network Security [Permanent Link]
Subject: Re: Minimal secure iptables firewall
Date: Wed, 20 Jul 2005 22:21:02 +0200 
Quoting cneither@gmail.com:


if you put these lines at the begginig, all packets wil be dropped.
All packets are tested, starting from first line. If packet match, it
do
what was specified, if not the next rule in the chain is examined.
So, all
packet will be matched to these rules, and whole trafic will be
stoped!!
you should set policy, at the first lines:
iptables -P INPUT DROP
iptables -P OUTPUT DROP
(you have to add some rules for output)
iptables -P FORWARD DROP


sorry, you're right, i mistyped... stupid mistake default policy should
always be drop, allow only what you need, and be as specific as possible


i think,
-A INPUT -p --dport 80 -j ACCEPT,
will be enough, without using -m options, in this case


true again... thanx for noticing ;)

(see you all at wth? :p)

-- 
harry
aka Rik Bobbaers

K.U.Leuven - LUDIT             -=- Tel: +32 485 52 71 50
Rik.Bobbaers@cc.kuleuven.ac.be -=- http://harry.ulyssis.org 

"Work hard and do your best, it'll make it easier for the rest"
-- Garfield
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  SYSLOG server position, tanvir hashmi
Next by Date:  Re: Minimal secure iptables firewall, Brendan Murray
Previous by Thread:  Re: Minimal secure iptables firewall, Brendan Murray
Next by Thread:  Re: Minimal secure iptables firewall, Security Admin
Indexes:  [Date] [Thread] [Top] [All Lists]