Mike McClain <[email protected]> wrote:

> I've run into a difficulty with iptables in that both GRC.com and
> PCFlank.com's firewall scans show ports 137-139 and 445 as blocked but
> not stealthed in spite of the fact that I have these statements in my
> firewall script:

>    iptables -A INPUT -p udp --dport 137:138 -j DROP
>    iptables -A INPUT -p tcp --dport 137:138 -j DROP
>    iptables -A INPUT -p tcp --dport 139 -j DROP
>    iptables -A INPUT -p tcp --dport 445 -j DROP
>    iptables -A OUTPUT -p udp --dport 137:138 -j DROP
>    iptables -A OUTPUT -p tcp --dport 137:138 -j DROP
>    iptables -A OUTPUT -p tcp --dport 139 -j DROP
>    iptables -A OUTPUT -p tcp --dport 445 -j DROP

> Both scans report all else stealthed.
> Suggestions?

Maybe your ISP already filters those ports?

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.


-- 
To UNSUBSCRIBE, email to [email protected] 
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: https://lists.debian.org/[email protected]

Reply via email to