On Monday 02 December 2002 16:11, Alejandro Valdez wrote:
> Hello,
>
> After many hours of reading and trying I think I produced a good ruleset,
> has anyone any suggestion about it? or something I'm missing? or not
> taking log from something important? or taking too much log?.
>
> The propouse is to close the WAN interface of my server, hide the firewall
> and log posibly scans from the outside.
> If this is ok, my next step is to close the LAN interface.
>
> Thanks in advance.
>
You may want to make your script take an argument, which causes it not to
clear the state table, users tend to get upset if you drop all their TCP
connections, just to add an entry to your ipf rule table.
-Antony
*************************************************************************
This e-mail and any attachments may contain confidential or privileged
information. If you are not the intended recipient, please contact the
sender immediately and do not use, store or disclose their contents.
Any views expressed are those of the individual sender and not of Kinetic
Information System Services Limited unless otherwise stated.
www.kinetic.co.uk
