On Sat, 25 Aug 2012 09:54:36 -0700 Tom Eastep <[email protected]> wrote:
> On 8/25/12 9:18 AM, Heh wrote: > > > Hmmm...I'd forgot to mention that I'd already done that also and was > > getting the result above. I probably wasn't using the correct command. I was > > 'stop'ping' shorewall, editing the .conf files, the 'start'ing shorewall. > > Should I have been doing something like 'restore' or some such instead? > > Please disregard my last post. > > The Universal configuration has these rules: > > SSH(ACCEPT) net $FW > Ping(ACCEPT) net $FW > > So if you want to be stealth, you need to remove both of those. > > -Tom I put 'DROP' in the parentheses (before you said to remove those two things). It did the tricka d gave me full stealth, but should I just 'remove' them instead, as you say to do, or will it create problems later by leaving them as I have them? John ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
