On Fri, 2005-11-25 at 12:47, Mandar Parab wrote: > how to block the ports like 445 or any 1 in > where we hv to make an entry & what is that. > I surfed in google i found a following command : > > iptables -A FORWARD -p tcp --dport 445 -j DROP > iptables -A INPUT -i eth0 -p tcp --dport 445 -j DROP > iptables -A INPUT -i eth1 -p tcp --dport 445 -j DROP > > But where to put this command i cannt able to understand. > Plz help me out if u can. > regards - Mandar
Put all your rules in a file, make it executable and make this file run through rc.local. Apart from blocking port 445, which is HTTPS, it would be nice if you have a log of when the port is blocked. iptables -A INPUT -i eth0 -p tcp --dport 445 -j LOG --log-prefix "*** PORT 445 BLOCKED ***" The message within quotes would appear in your syslog everytime the kernel drops a request to port 445. Regards, NMK. ----------------------------------------------------------------------- The proof of the pudding is in the eating. -- Miguel de Cervantes ------------------------ Yahoo! Groups Sponsor --------------------~--> Get fast access to your favorite Yahoo! Groups. Make Yahoo! your home page http://us.click.yahoo.com/dpRU5A/wUILAA/yQLSAA/0XFolB/TM --------------------------------------------------------------------~-> ***Archives: http://groups.yahoo.com/group/linuxvadapav/messages ***Group Usage Guidelines (Please Read): http://groups.yahoo.com/group/linuxvadapav/files/mailing_rules Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/linuxvadapav/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
