nmap and hping can penetrate firewall. Used it on a telco grade
firewall to diagnose connectivity and it went straight through
perfectly. It can still find those ports.

On Sun, 12 Dec 2004 13:14:16 +0800, Prem Vilas Fortran Rara
<[EMAIL PROTECTED]> wrote:
> On Sun, 12 Dec 2004 11:48:19 +0800, Gideon N. Guillen <[EMAIL PROTECTED]> 
> wrote:
> 
> [snipped]
> 
> > Anyway, you can use this
> > command to add iptables filter to block those ports:
> >
> > /sbin/iptables -A INPUT -i <interface> -p udp -m udp --dport <portno> \
> > -j REJECT --reject-with icmp-port-unreachable
> >
> > Just reaplace <interface> (like eth0 or ppp0, etc) with the appropriate
> > interface device name and <portno> with the appropriate port that you
> > need to block (the one in the list you gave).
> 
> Does this still work even if I am using shorewall? (meaning it appends
> the rule to some current config).
> 
> 
> --
> Philippine Linux Users' Group (PLUG) Mailing List
> [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph)
> Official Website: http://plug.linux.org.ph
> Searchable Archives: http://marc.free.net.ph
> .
> To leave, go to http://lists.q-linux.com/mailman/listinfo/plug
> .
> Are you a Linux newbie? To join the newbie list, go to
> http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
> 


-- 
Friendster Mobile is here!
Text Friendster and send to 2276 for Globe/Sun and 227 for Smart/TnT.
View our greetings (see if your there!), text Friendster Greets and
send to 2276 for Globe/Sun and 227 for Smart/TnT.
- Home of Friendster Mobile (w/Webcam)
http://fingerapps.com/desk/
----
Roger P. Filomeno
*Systems Developer / R&D - Finger Apps Inc, http://fingerapps.com
*Systems Developer - Entertainment Gateway Group, http://egg.ph
*Systems Developer - Friendster Mobile Philippines, http://friendster.com
*Mobile Specialist - RITMA, Madrid-Spain
*Registered Linux User # 367694
*VOIP # 7041530 (InPhonex)
--
Philippine Linux Users' Group (PLUG) Mailing List
[EMAIL PROTECTED] (#PLUG @ irc.free.net.ph)
Official Website: http://plug.linux.org.ph
Searchable Archives: http://marc.free.net.ph
.
To leave, go to http://lists.q-linux.com/mailman/listinfo/plug
.
Are you a Linux newbie? To join the newbie list, go to
http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie

Reply via email to