Re: howto block ports

2004-02-26 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Feb 25, 2004 at 07:54:00PM +, Brian Brazil wrote: > Not true IIRC. Unless you have your network card set to promiscuious > mode the kernel will only receive packets intended for you card and > ARP broadcasts - generally MAC-IP conversion or

Re: howto block ports

2004-02-25 Thread Brian Brazil
On Wed, Feb 25, 2004 at 09:53:12AM -0800, Paul Johnson wrote: > On Wed, Feb 25, 2004 at 09:50:28AM -0500, Harland Christofferson wrote: > > i suspect that data destine for these _closed_ ports is being put > > in the TCP/UDP stack. > > All traffic coming in is, whether or not it's for you, if it'

Re: howto block ports

2004-02-25 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Feb 25, 2004 at 09:50:28AM -0500, Harland Christofferson wrote: > i have had a firewall configured to drop inbound packets on ports > that i am not using via iptables. i ran a port scanning utility from > an external machine. the utility dete

Re: howto block ports

2004-02-25 Thread Brian Brazil
On Wed, Feb 25, 2004 at 09:50:28AM -0500, Harland Christofferson wrote: > i have had a firewall configured to drop inbound packets on ports > that i am not using via iptables. i ran a port scanning utility from > an external machine. the utility detected that, although the ports > were _closed_,

Fwd: Re: howto block ports

2004-02-25 Thread Harland Christofferson
At Wednesday, 25 February 2004, David Clymer <[EMAIL PROTECTED]> wrote: >On Wed, 2004-02-25 at 09:50, Harland Christofferson wrote: >> i have had a firewall configured to drop inbound packets on ports >> that i am not using via iptables. i ran a port scanning utility from >> an external machine

Re: howto block ports

2004-02-25 Thread David Clymer
On Wed, 2004-02-25 at 09:50, Harland Christofferson wrote: > i have had a firewall configured to drop inbound packets on ports > that i am not using via iptables. i ran a port scanning utility from > an external machine. the utility detected that, although the ports > were _closed_, the ports st

howto block ports

2004-02-25 Thread Harland Christofferson
i have had a firewall configured to drop inbound packets on ports that i am not using via iptables. i ran a port scanning utility from an external machine. the utility detected that, although the ports were _closed_, the ports still responded to the port scan utility. i suspect that data destine