Re: Iptables Default policy of Reject

2007-09-12 Thread Celejar
On Tue, 11 Sep 2007 09:52:12 -0700 David Brodbeck [EMAIL PROTECTED] wrote: On Sep 11, 2007, at 12:11 AM, Christopher Zimmermann wrote: As long as I use iptables I was not able to use policies of reject. I even remember the target 'REJECT' being a selectable kernel option. Reject

Re: Iptables Default policy of Reject

2007-09-11 Thread Christopher Zimmermann
As long as I use iptables I was not able to use policies of reject. I even remember the target 'REJECT' being a selectable kernel option. Reject requires some ICMP action whereas DROP doesn't. I am just going through my firewall setup and I notice I can no longer do iptables -P INPUT

Re: Iptables Default policy of Reject

2007-09-11 Thread Alex Samad
On Tue, Sep 11, 2007 at 09:11:12AM +0200, Christopher Zimmermann wrote: As long as I use iptables I was not able to use policies of reject. I even remember the target 'REJECT' being a selectable kernel option. Reject requires some ICMP action whereas DROP doesn't. I can understand the

Re: Iptables Default policy of Reject

2007-09-11 Thread David Brodbeck
On Sep 11, 2007, at 12:11 AM, Christopher Zimmermann wrote: As long as I use iptables I was not able to use policies of reject. I even remember the target 'REJECT' being a selectable kernel option. Reject requires some ICMP action whereas DROP doesn't. But be aware that DROP can cause

Re: Iptables Default policy of Reject

2007-09-11 Thread Georgi Alexandrov
David Brodbeck wrote: On Sep 11, 2007, at 12:11 AM, Christopher Zimmermann wrote: As long as I use iptables I was not able to use policies of reject. I even remember the target 'REJECT' being a selectable kernel option. Reject requires some ICMP action whereas DROP doesn't. But be aware

Iptables Default policy of Reject

2007-09-10 Thread Alex Samad
Hi I am just going

Re: Iptables Default policy of Reject

2007-09-10 Thread Nelson Castillo
On 9/10/07, Alex Samad [EMAIL PROTECTED] wrote: Hi I am just going through my firewall setup and I notice I can no longer do iptables -P INPUT REJECT iptables -P INPUT DROP I use DROP. I guess it is not a good idea to send ICMP packets back by default (But I don't know if it can be done).

Re: Iptables Default policy of Reject

2007-09-10 Thread Mumia W..
On 09/10/2007 04:55 PM, Alex Samad wrote: Hi I am just going through my firewall setup and I notice I can no longer do iptables -P INPUT REJECT