Re: Iptables & Default policy of Reject

2007-09-12 Thread Celejar
On Tue, 11 Sep 2007 09:52:12 -0700 David Brodbeck <[EMAIL PROTECTED]> wrote: > > On Sep 11, 2007, at 12:11 AM, Christopher Zimmermann wrote: > > > As long as I use iptables I was not able to use policies of reject. I > > even remember the target 'REJECT' being a selectable kernel option. > > Rej

Re: Iptables & Default policy of Reject

2007-09-11 Thread Georgi Alexandrov
David Brodbeck wrote: > > On Sep 11, 2007, at 12:11 AM, Christopher Zimmermann wrote: > >> As long as I use iptables I was not able to use policies of reject. I >> even remember the target 'REJECT' being a selectable kernel option. >> Reject requires some ICMP action whereas DROP doesn't. > > Bu

Re: Iptables & Default policy of Reject

2007-09-11 Thread David Brodbeck
On Sep 11, 2007, at 12:11 AM, Christopher Zimmermann wrote: As long as I use iptables I was not able to use policies of reject. I even remember the target 'REJECT' being a selectable kernel option. Reject requires some ICMP action whereas DROP doesn't. But be aware that DROP can cause unexpec

Re: Iptables & Default policy of Reject

2007-09-11 Thread Alex Samad
On Tue, Sep 11, 2007 at 09:11:12AM +0200, Christopher Zimmermann wrote: > As long as I use iptables I was not able to use policies of reject. I > even remember the target 'REJECT' being a selectable kernel option. > Reject requires some ICMP action whereas DROP doesn't. I can understand the reaso

Re: Iptables & Default policy of Reject

2007-09-11 Thread Christopher Zimmermann
As long as I use iptables I was not able to use policies of reject. I even remember the target 'REJECT' being a selectable kernel option. Reject requires some ICMP action whereas DROP doesn't. > I am just going through my firewall setup and I notice I can no longer > do iptables -P INPUT R

Re: Iptables & Default policy of Reject

2007-09-10 Thread Mumia W..
On 09/10/2007 04:55 PM, Alex Samad wrote: Hi I am just going through my firewall setup and I notice I can no longer do iptables -P INPUT REJECT

Re: Iptables & Default policy of Reject

2007-09-10 Thread Nelson Castillo
On 9/10/07, Alex Samad <[EMAIL PROTECTED]> wrote: > Hi > > I am just going through my firewall setup and I notice I can no longer > do iptables -P INPUT REJECT iptables -P INPUT DROP I use DROP. I guess it is not a good idea to send ICMP packets back by default (But I don't know if it can be don

Iptables & Default policy of Reject

2007-09-10 Thread Alex Samad
Hi I am just going through