On Mon, Mar 26, 2001 at 08:01:34PM +0200, Alson van der Meulen wrote: > It accepts all other traffic to non-privileged ports. i prefer to > allow traffic without the syn flag (not initiating a new connection) > only, not all misc traffic, it's more secure, the way to do it is > like: > ipchains -A input -s 0/0 -d 0/0 1024:65535 -p tcp ! -y -j ACCEPT > ipchains -A input -s 0/0 -d 0/0 1024:65535 -p udp ! -y -j ACCEPT >
unfortuantly this breaks irc, ftp and many other things. > Read the ipchains howto for more info > -- > ,-------------------------------------------. > > Name: Alson van der Meulen < > > Personal: [EMAIL PROTECTED] < > > School: [EMAIL PROTECTED] < > `-------------------------------------------' > Nobody was using that file /vmunix, were they? > --------------------------------------------- > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- Ethan Benson http://www.alaska.net/~erbenson/
pgpVkJlcKGbQh.pgp
Description: PGP signature
