Re: [CentOS] Block network at logoff on workstation

2010-02-06 Thread Kwan Lowe
On Wed, Feb 3, 2010 at 9:36 PM, David McGuffey davidmcguf...@verizon.net wrote: I'm trying to reduce the attack surface to a home machine that is always on and connected to the Internet.  It is running CentOS 5.4, with tight iptables rules and sits behind a Verizon FiOS firewall/switch also

Re: [CentOS] Block network at logoff on workstation

2010-02-05 Thread David McGuffey
On Thu, 2010-02-04 at 09:19 -0500, Ross Walker wrote: On Feb 3, 2010, at 9:36 PM, David McGuffey davidmcguf...@verizon.net wrote: I'm trying to reduce the attack surface to a home machine that is always on and connected to the Internet. It is running CentOS 5.4, with tight

Re: [CentOS] Block network at logoff on workstation

2010-02-05 Thread Ross Walker
On Feb 5, 2010, at 6:55 PM, David McGuffey davidmcguf...@verizon.net wrote: On Thu, 2010-02-04 at 09:19 -0500, Ross Walker wrote: On Feb 3, 2010, at 9:36 PM, David McGuffey davidmcguf...@verizon.net wrote: I'm trying to reduce the attack surface to a home machine that is always on

Re: [CentOS] Block network at logoff on workstation

2010-02-04 Thread Ross Walker
On Feb 3, 2010, at 9:36 PM, David McGuffey davidmcguf...@verizon.net wrote: I'm trying to reduce the attack surface to a home machine that is always on and connected to the Internet. It is running CentOS 5.4, with tight iptables rules and sits behind a Verizon FiOS firewall/switch

Re: [CentOS] Block network at logoff on workstation

2010-02-04 Thread Bowie Bailey
David McGuffey wrote: I'm trying to reduce the attack surface to a home machine that is always on and connected to the Internet. It is running CentOS 5.4, with tight iptables rules and sits behind a Verizon FiOS firewall/switch also configured with tight rules. I was wondering how to best

Re: [CentOS] Block network at logoff on workstation

2010-02-03 Thread nate
David McGuffey wrote: I was wondering how to best block all network access to it when I log off...then unblock it when I log on. Changing iptables requires root access...as does running ifdown and ifup scripts. You could use sudo to call them.. But I don't really understand your concern, if