Re: IPChains Question (compatibility mode on kernel 2.4.x)

From: Sebastian Muniz (seba_at_mtss.dnsalias.org)
Date: 05/13/03

  • Next message: Bill Tihen: "IPChains Question (compatibility mode on kernel 2.4.x)" 
    Date: Mon, 12 May 2003 21:17:00 -0500
To: Bill Tihen <bill@tasis.ch>

    Hi!
    You are missing the point.

    ddp 37 DDP # Datagram Delivery Protocol
    Seems you are trying to block ddp, that is a protocol that runs
    _over_ tcp or udp
    Firewall can decide on the port but examining
    the port source/address of tcp and udp.
    For instance if you want to deny or accept ddp you should block/accept
    tcp/udp arriving on port 37.
    Byes!

    El dia Fri, 9 May 2003 13:50:45 +0200 (CEST) Bill Tihen <bill@tasis.ch> me decia que : 

    ----
| 
| Applying ipchains firewall rules: /sbin/ipchains: can only specify ports for
| icmp, tcp or udp
| Try `/sbin/ipchains -h' or '/sbin/ipchains --help' for more information.
| ipchains command -A input -i eth0 -p ddp --dport rtmp -j ACCEPT failed
| This is /sbin/ipchains-restore v1.1.2
| Any ideas on what I could do to fix this?
Replace -p ddp by tcp or udp
| 
-----
-- 
Sebirrintintin
ICQ 72585865
 (o_
 //\
 V_/_ 
Linux User 198723
  • Next message: Bill Tihen: "IPChains Question (compatibility mode on kernel 2.4.x)"

    Relevant Pages

    • Re: Open port PIX 501
      ... :i can't open the port in my PIX. ... :I need open the port 1000 to point to the IP 10.254.254.222. ... in practice only DNS servers doing zone transfers need tcp. ... of UDP, it would be a highly unusual client which did not stick ...
      (comp.dcom.sys.cisco)
    • RE: DNS Records
      ... tcp>1023 53 Client queries with long replies ... On other client types, ... if you lock down all but port ... a client queries an initial server from an unreserved port number to UDP ...
      (Security-Basics)
    • Windows Update Scrammed My Server
      ... The Simple TCP/IP Services could not find the TCP Echo port. ... The Simple TCP/IP Services could not find the UDP Echo port. ...
      (microsoft.public.windowsupdate)
    • Re: Settings for Mercenaries and MS MN500 Wireless Router
      ... When you type "27960-27960 tcp and udp" exactly where are those entries ... Enable Description Outbound Port Trigger Type Inbound Port Public Type ... > inside the game. ...
      (microsoft.public.games)
    • Re: using routers ACL to substitute firewall
      ... > You can handle TCP responses with a statement such as ... > systems have any programs that dynamically allocate UDP source ... > packets with a UDP source port of 137, ... > For incoming connections, UDP is again a problem, in that UDP ...
      (comp.security.misc)