Re: [expert] firewall security

2002-03-02 Thread Fedneg
I am using bastille-firewall Scanned my computer in sygatetechcom as you suggest and all UDP ports are closed I configured it with InteractiveBastille -x I don't enter anything for UDP service names or port numbers to allow on public interfaces and let UDP services to block as default (ie 2049

Re: [expert] firewall security

2002-03-02 Thread Lee Roberts
At 11:18 AM 3/1/2002 +0100, Fedneg wrote: I am using bastille-firewall. Scanned my computer in sygatetech.com as you suggest and all UDP ports are closed. That's my point. sygatetech.com shows them closed instead of blocked. sygatetech.com showed some UDP ports open when another port scanner

Re: [expert] firewall security

2002-03-01 Thread Mike Rambo
Lee Roberts wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've tried tiny firewall, bastille-firewall, and one other (can't remember the name). NONE of them block access to the UDP services no matter what I do. In InteractiveBastille, I don't enter anything for UDP service names

Re: [expert] firewall security

2002-03-01 Thread Lee Roberts
pmfirewall doesn't use iptables. Besides, I used pmfirewall with Mandrake 7.2 and had the same problem. At 07:37 AM 3/1/2002 -0500, Mike Rambo wrote: Lee Roberts wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've tried tiny firewall, bastille-firewall, and one other (can't

Re: [expert] firewall security

2002-03-01 Thread wim
Mike Rambo wrote: Lee Roberts wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've tried tiny firewall, bastille-firewall, and one other (can't remember the name). NONE of them block access to the UDP services no matter what I do. In InteractiveBastille, I don't enter anything for UDP

Re: [expert] firewall security

2002-03-01 Thread J. Craig Woods
Mike Rambo wrote: Have you tried pmfirewall? My co-worker used it on his box. It was easy to set up and nmap found nothing when I ran it against the box afterward. -- Mike Rambo [EMAIL PROTECTED] It seems his is using iptables, and pmfirewall will only work with ipchains.. -- J.

Re: [expert] firewall security

2002-03-01 Thread Lee Roberts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 It seems that the sygatetechcom scanner is broken I got the AW Security Port Scanner 402 for my windows box and used it to scan my linux box It shows all UDP ports to the public interface blocked I ran the TCP and UDP port scans on a friends linux

[expert] firewall security

2002-02-28 Thread Lee Roberts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've tried tiny firewall, bastille-firewall, and one other (can't remember the name) NONE of them block access to the UDP services no matter what I do In InteractiveBastille, I don't enter anything for UDP service names or port numbers to allow on

Re: [expert] firewall security

2002-02-28 Thread William Kenworthy
How are you checking that they are not being blocked? ie, outside scanner, nmap BillK On Fri, 2002-03-01 at 08:21, Lee Roberts wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've tried tiny firewall, bastille-firewall, and one other (can't remember the name) NONE of them block

Re: [expert] firewall security

2002-02-28 Thread Lee Roberts
sygatetechcom At 09:34 AM 3/1/2002 +0800, William Kenworthy wrote: How are you checking that they are not being blocked? ie, outside scanner, nmap BillK On Fri, 2002-03-01 at 08:21, Lee Roberts wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've tried tiny firewall,