On Mon, Mar 26, 2001 at 08:01:34PM +0200, Alson van der Meulen wrote:
> It accepts all other traffic to non-privileged ports. i prefer to
> allow traffic without the syn flag (not initiating a new connection)
> only, not all misc traffic, it's more secure, the way to do it is
> like:
> ipchains -A input -s 0/0 -d 0/0 1024:65535 -p tcp ! -y -j ACCEPT
> ipchains -A input -s 0/0 -d 0/0 1024:65535 -p udp ! -y -j ACCEPT
>
unfortuantly this breaks irc, ftp and many other things.
> Read the ipchains howto for more info
> --
> ,-------------------------------------------.
> > Name: Alson van der Meulen <
> > Personal: [EMAIL PROTECTED] <
> > School: [EMAIL PROTECTED] <
> `-------------------------------------------'
> Nobody was using that file /vmunix, were they?
> ---------------------------------------------
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>
--
Ethan Benson
http://www.alaska.net/~erbenson/
PGP signature
