Phillip Deackes wrote:
> OPEN: 62.136.66.48 -> 192.168.1.10 UDP, port: 513 -> 513 > > On consulting /etc/sevices I can see that port 513 is used for whod. > I donßt know what "whod" is, but I´ve stopped this using the following commands in my /etc/isdn/device.ippp0 #At the end of the Start section #Output Firewall, dont allow connection to Port 137-139 and 513 with UDP #TCP is allowed. ipfwadm -O -p accept ipfwadm -O -a deny -P udp -S 0.0.0.0/0 137:139 ipfwadm -O -a deny -P udp -S 0.0.0.0/0 513 #in the Stop section #Delete Firewall Rules ipfwadm -O -f Depend on your kernel version you may use ipchains or then ipwadm/ipchains wrapper. Ipchains ist the newer method of kernel 2.2.x Good luck, Bernd