I've run into a difficulty with iptables in that both GRC.com and
PCFlank.com's firewall scans show ports 137-139 and 445 as blocked but
not stealthed in spite of the fact that I have these statements in my
firewall script:
    iptables -A INPUT -p udp --dport 137:138 -j DROP
    iptables -A INPUT -p tcp --dport 137:138 -j DROP
    iptables -A INPUT -p tcp --dport 139 -j DROP
    iptables -A INPUT -p tcp --dport 445 -j DROP
    iptables -A OUTPUT -p udp --dport 137:138 -j DROP
    iptables -A OUTPUT -p tcp --dport 137:138 -j DROP
    iptables -A OUTPUT -p tcp --dport 139 -j DROP
    iptables -A OUTPUT -p tcp --dport 445 -j DROP

Both scans report all else stealthed.
Suggestions?
THX,
Mike
--
No electrons were harmed in sending this message, some were inconvenienced.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140729210423.GA25852@playground

Reply via email to