sunt unii paranoici cu -P DROP _si_cu_ -s 0/0 -d 0/0 -J DROP :D

Birzan George Cristian said:
> On Tue, Oct 21, 2003 at 03:20:04PM +0300, Ionut Boldizsar wrote:
>> On Tue, 2003-10-21 at 15:10, Birzan George Cristian wrote:
>> > -I ca altfel nu faceti nimic. In fine, daca te bazezi pe default
>> policy
>> > ACCEPT, da, merge si -A, dar cine mai foloseste asa ceva? :-)
>>
>> Eu. Mi se pare mai logic sa fac un catch-all rule in fiecare chain decat
>> sa ma incui afara cu un default policy deny.
> Let me rephrase. default policy accept, si fara catch all. Firewall-uri
> 'deny some, allow the rest'.
>
> --
> Birzan George                 Violence is the last refuge of
>   Cristian                    the incompetent -- Salvor Hardin

-- 
save the ozone layer

--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui