Thanks


Only DENY is a IPCHAINS thingie replaced that with DROP.


Peter



Nathanael Noblet wrote:



On Wednesday, January 14, 2004, at 09:45 AM, [EMAIL PROTECTED] wrote:



Good Morning :


What are the other CLUGgers using to 'secure' their (Apache) Servers ?

I got a Apache server behind a Cisco PIX box, but as it is still accessible from the outside 'directly' I would like to put some 'security' on it.
PIX should filter out everything that is not for port 80/443/22 but still...


Anybody experience with a (good) IPTables front-end ?
Experience with smoothwall / tripwire / ... ?
I also need some (browser) front-end to analyse the log(s) these 'security programs create...


OS = Linux SuSE 9 Pro (minimal)
Apache 2 with SSL


iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -j DENY



_______________________________________________
clug-talk mailing list
[EMAIL PROTECTED]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca

Reply via email to