spoofed as in local IP coming in from the internet..
this is what I mean..

#-- hosts.allow
ALL: 192.168.0.

#-- iptables
iptables -A INPUT -s 192.168.0.0/24 -i eth1 -j DROP  # eth1=internet

that's some attacks but doesn't stop DOS attacks which hackers end up in the
local machines IP(local access).. that's when you need other software to
protect it (ie. tripwire, etc..)

thanks,
George Vieira
Systems Manager
Citadel Computer Systems P/L
http://www.citadelcomputer.com.au



-----Original Message-----
From: Antony Stone [mailto:[EMAIL PROTECTED]]
Sent: Monday, 08 July 2002 9:29 AM
To: [EMAIL PROTECTED]
Subject: Re: hosts.deny


On Monday 08 July 2002 12:24 am, George Vieira wrote:

> I thought iptables and linux could block spoofed ips anyway.. this is a
> last resort..

How do you block a spoofed IP ?   How do you know it's spoofed ?

 

Antony

Reply via email to