Re: [Cerowrt-devel] blocking probes...

2013-01-28 Thread Maciej Soltysiak
I've said it before and I'll say it again: iptables -I zone_wan -j DROP And if you really need access from wan INSERT a rule before that DROP. Regards, Maciej On Mon, Jan 28, 2013 at 4:44 PM, Török Edwin edwin+ml-cero...@etorok.netwrote: On 01/13/2013 11:15 AM, Török Edwin wrote: On

Re: [Cerowrt-devel] blocking probes...

2013-01-13 Thread Török Edwin
On 01/13/2013 06:50 AM, Dave Taht wrote: one of the underused features of cerowrt is that I stuck a sensor on xinetd to detect attempts to telnet or ftp to the router and cut off access to some other services, notably ssh. I don't see this on my cerowrt, is this only in the 3.7.x series? I

[Cerowrt-devel] blocking probes...

2013-01-12 Thread Dave Taht
one of the underused features of cerowrt is that I stuck a sensor on xinetd to detect attempts to telnet or ftp to the router and cut off access to some other services, notably ssh. I would have loved to extend this facility to either do it entirely in iptables or leverage xinetd to talk to

Re: [Cerowrt-devel] blocking probes...

2013-01-12 Thread Sebastian Moeller
Hi Dave, On Jan 12, 2013, at 20:50 , Dave Taht wrote: one of the underused features of cerowrt is that I stuck a sensor on xinetd to detect attempts to telnet or ftp to the router and cut off access to some other services, notably ssh. I would have loved to extend this facility to either