ALT Linux Community general discussions
 help / color / mirror / Atom feed
From: Maxim Tyurin <mrkooll@tdr.pibhe.com>
To: community@altlinux.ru
Subject: Re: [Comm] firewall
Date: Wed, 5 Mar 2003 09:18:43 +0200
Message-ID: <20030305071842.GA6420@mrkooll.tdr.pibhe.com> (raw)
In-Reply-To: <2211744511.20030305124845@ngs.ru>

[-- Attachment #1: Type: text/plain, Size: 671 bytes --]

> Пробовал закомментировать строки разрешающие порты 21 и 80 (по
> умолчанию запрещено всё, что явно не разрешено), но как пускало на ftp
> и http, так и пускает.
> 
> Почему пакеты не фильтруются? Чего я мог пропустить?

У тебя первой строкой в INPUT - разрешить все новые соединения.
Читай iptables tutirial внимательно.
> Chain INPUT (policy DROP)
> target     prot opt source               destination         
> bad_tcp_packets  tcp  --  anywhere             anywhere           
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Разрешаются все новые соединения

-- 

With Best Regards, Maxim Tyurin
mailto: MrKooll@mail.ru
JID:	MrKooll@jabber.pibhe.com
			

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

  reply	other threads:[~2003-03-05  7:18 UTC|newest]

Thread overview: 19+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-03-04 14:57 Denis G. Samsonenko
2003-03-04 15:45 ` Dmitry Alexeyev
2003-03-04 16:34   ` Oleg Lukashin
2003-03-04 16:57     ` Re[2]: " Dmitry Alexeyev
2003-03-04 17:23       ` Oleg Lukashin
2003-03-04 17:27       ` Maxim Tyurin
2003-03-05  6:48         ` Re[2]: " Denis G. Samsonenko
2003-03-05  7:18           ` Maxim Tyurin [this message]
2003-03-05  8:40             ` Denis G. Samsonenko
2003-03-05  9:33               ` Maxim Tyurin
2003-03-05 12:59                 ` Re[2]: " Denis G. Samsonenko
2003-03-05 13:04                   ` Vitaly Ostanin
2003-03-05 13:30                   ` Antonio
2003-03-05 13:36                     ` Re[3]: " Denis G. Samsonenko
2003-03-06  8:00                       ` Andrei M. Laptev
2003-03-06 14:40                         ` Re[2]: " Denis G. Samsonenko
2003-03-05  6:38   ` Denis G. Samsonenko
2003-03-05  8:33 ` Alex Yustasov
2003-03-05  8:45   ` Denis G. Samsonenko

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20030305071842.GA6420@mrkooll.tdr.pibhe.com \
    --to=mrkooll@tdr.pibhe.com \
    --cc=community@altlinux.ru \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

ALT Linux Community general discussions

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
		mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
	public-inbox-index community

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.community


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git