IPChains Question (compatibility mode on kernel 2.4.x)

From: Bill Tihen (bill_at_tasis.ch)
Date: 05/13/03

  • Next message: Glynn Clements: "Re: IPChains Question (compatibility mode on kernel 2.4.x)" 
    To: focus-linux@securityfocus.com
Date: 13 May 2003 11:58:40 +0200

    The below info points out my key mistake:

    On Mon, 2003-05-12 at 19:54, Georgi Kostov wrote:
    > Also, one of the messages says that ports can be specified only for
    > "icmp, tcp or udp", and you are specifying ddp.

    the following works (& so does netatalk too)!

    #########
    # ATALK #
    #########
    # allow AppleTalk/Netatalk to function as a server
    -A input -i eth0 -p tcp -s 172.25.0.0/16 --dport afpovertcp -j ACCEPT
    -A input -i eth0 -p ddp -s 172.25.0.0/16 -d 172.25.0.10 -j ACCEPT

    As many of you suggested I will indeed learn iptables -- sometime
    (hopefully soon).

    Thanks for everyone's your help. 

    -- 
Bill Tihen <bill@tasis.ch>
  • Next message: Glynn Clements: "Re: IPChains Question (compatibility mode on kernel 2.4.x)"

    Relevant Pages

    • Re: losing connection to server when scanned by nmap - Iptables
      ... Check for some sort of idson the server, ... block access to those ports from the ip that scanned it. ... > The iptables script applied to the NIC is shown below. ... > # Refuse packets claiming to be from a Class A private network. ...
      (comp.security.firewalls)
    • RE: Strange connection
      ... By mistake I left an old phpBB running on my server. ... leave http, https and ftp open, and some other ports locked to a certain ... >>should be disabled and blocked by iptables. ...
      (Fedora)
    • Stand alone linux webserver security tuning
      ... I would like to know how can I improve my firewall on web ... server, for example: DoS preventions, Syn port scan detection using ... iptables and so on. ... ports. ...
      (Security-Basics)
    • iptables firewall making smtp/pop3 slow in response
      ... I have a masq'd lan behind the server and the server has iptables ... setup to drop everything on input and output tables as a policy and ... then specifically opens up for ports 25, ...
      (comp.os.linux.networking)
    • Re: Whats a decent modem/router for tech savy user?
      ... It is not possible to route or deny traffic to specific ports based on the source IP address. ... But it wont route back inside the LAN - needs internal DNS server spoofing. ... Normally, this option should be Enabled, so that an Internet connection will be made automatically, whenever Internet-bound traffic is detected. ... Specifying a Default DMZ Server allows you to set up a computer or server that is available to anyone on the Internet for services that you haven't defined. ...
      (uk.telecom.broadband)