Re: iptables configuration issue
- From: Ansgar Wiechers <bugtraq@xxxxxxxxxxxxxxxx>
- Date: Wed, 26 Aug 2009 00:54:18 +0200
On 2009-08-25 J.Bakshi wrote:
I really really need your help to configure iptables to cope with
"connection time out problem" Here what actually the situation is.
I have configured iptables to drop nmap and other port scanning
techniques ( collected from internet, like XMAS scan, FIN scan
etc...). If I run nmap against the server ( like nmap -P0 <myserver>
or nmap -P0 -sT <myserver> ) then the firewall successfully dropping
the scan packets and make the nmap scan to wait for *looooong* .
Good. But on the other hand the http and mail server running on the
server providing "connection time out error" hence it is not possible
to connect the mail /apache and other services running on that server
during port scanning against it. Could any one kindly suggest how to
cope with this situiation ?
Start with posting your ruleset.
Regards
Ansgar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq
------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------
- References:
- iptables configuration issue
- From: J.Bakshi
- iptables configuration issue
- Prev by Date: Re: What can WPA/WPA2 use for Encryption
- Next by Date: Re: What can WPA/WPA2 use for Encryption
- Previous by thread: iptables configuration issue
- Next by thread: TeamViewer assessment
- Index(es):
Relevant Pages
|