Re: [gentoo-user] Re: OT: A netbios-ssn blocking rule?

2006-08-23 Thread Daniel Iliev
gentuxx wrote: > Actually, some of those ports are UDP. /etc/services says the same for > both TCP and UDP. So if -p is required for --dport, you would have to > add rules for UDP as well. > > iptables -A FORWARD -d *target-PC* -p udp --dport 137:139 -j DROP > iptables -A INPUT -p udp --dport 137

Re: [gentoo-user] Re: OT: A netbios-ssn blocking rule?

2006-08-23 Thread Daniel Iliev
James wrote: >> Daniel Iliev ilievnet.com> writes: >> > > > My iptables based firewall seem to be working, However, I keep getting > triplets > of this activity: > > curious.ip www.me.com tcp 2286 > netbios-ssn Seq=0 Len=0 MSS=1460 > www.me.com curious.ip tcp netbios-ssn > 2286 [RST,

[gentoo-user] Re: OT: A netbios-ssn blocking rule?

2006-08-20 Thread James
> Daniel Iliev ilievnet.com> writes: My iptables based firewall seem to be working, However, I keep getting triplets of this activity: curious.ip www.me.com tcp 2286 > netbios-ssn Seq=0 Len=0 MSS=1460 www.me.com curious.ip tcp netbios-ssn > 2286 [RST, ACK] Seq=0 Ack=1 Win=0 Len=0 sim