On Thu, 02 Jul 2015 10:56:01 +0200, Matteo Croce said: > Add option to disable any reply not related to a listening socket, > like RST/ACK for TCP and ICMP Port-Unreachable for UDP. > Also disables ICMP replies to echo request and timestamp. > The stealth mode can be enabled selectively for a single interface.
A few notes..... 1) Do you have an actual use case where an iptables '-j DROP' isn't usable? 2) You *do* realize that this isn't anywhere near sufficient in order to actually make your machine "invisible", right? (Hint: What *other* packets can be sent to a machine to provoke a response?) 3) At least my copy had massive whitespace damage, where all the tab characters appear to have evaporated....
pgpbjzUxX6FGO.pgp
Description: PGP signature