Re: IPChains Question (compatibility mode on kernel 2.4.x)

From: Glynn Clements (glynn.clements_at_virgin.net)
Date: 05/13/03

  • Next message: Michael Kluge: "AW: IPChains Question (compatibility mode on kernel 2.4.x)" 
    Date: Tue, 13 May 2003 04:41:41 +0100
To: Sebastian Muniz <seba@mtss.dnsalias.org>

    Sebastian Muniz wrote:

    > Hi!
    > You are missing the point.
    >
    > ddp 37 DDP # Datagram Delivery Protocol
    > Seems you are trying to block ddp, that is a protocol that runs
    > _over_ tcp or udp

    DDP is on the same layer as TCP, UDP, ICMP etc:

    icmp 1 ICMP # internet control message protocol
    igmp 2 IGMP # Internet Group Management
    tcp 6 TCP # transmission control protocol
    udp 17 UDP # user datagram protocol
    ddp 37 DDP # Datagram Delivery Protocol

    > Firewall can decide on the port but examining
    > the port source/address of tcp and udp.
    > For instance if you want to deny or accept ddp you should block/accept
    > tcp/udp arriving on port 37.

    TCP/UDP port 37 is the "time" protocol. DDP is IP protocol 37. 

    -- 
Glynn Clements <glynn.clements@virgin.net>
  • Next message: Michael Kluge: "AW: IPChains Question (compatibility mode on kernel 2.4.x)"

    Relevant Pages