IPTables question

2003-08-14 Thread RedHat Mailing List
/etc/sysconfig/iptables has this rule -A RH-Lokkit-0-50-INPUT -s 12.224.128.149/255.255.254.0 -j REJECT Yet, 12.224.128.149 can still connect. Any idea why? Could it relate to the machine having more than one network card? I'm using eth1. Port eth0 is disabled. Is iptables assuming eth0?

Fwd: Iptables question.

2002-09-23 Thread Peter Robb
Subject: Iptables question. Date: Tue, 17 Sep 2002 15:01:42 +0200 (CEST) From: linux power <[EMAIL PROTECTED]> To: redhat mail list <[EMAIL PROTECTED]> When I apply new rules to my iptables I get this. Chain already excist. And I cant apply any new rules although I can flush the rules, b

Iptables question.

2002-09-17 Thread linux power
When I apply new rules to my iptables I get this. Chain already excist. And I cant apply any new rules although I can flush the rules, but linux doesent use them. The chain message was not in the beginning when I installed iptables, but occured a couple of days ago. Is there any hacker the had come

IPTables question

2002-07-10 Thread Apolinaras Sinkevicius
What do I have to enter in via command line to ban all the traffic on ethernet adapter eth0 coming or leaving 255.255.255.255 and 0.0.0.0. I am tired of bootp traffic my server gets hit cause provider does not force other users to check their configurations, so I would like to ban all bootp traffi

Re: Iptables question

2002-07-03 Thread Mike Burger
You could try this: iptables -A INPUT -s x.x.x.x -j DROP On Wed, 3 Jul 2002, Apolinaras Sinkevicius wrote: > How do I ban address X.X.X.X from connecting to > 0.0.0.0 and 255.255.255.255 > What would be the command line I need to enter? > > I am still adjusting to non-NT world, so I need a bit

Iptables question

2002-07-03 Thread Apolinaras Sinkevicius
How do I ban address X.X.X.X from connecting to 0.0.0.0 and 255.255.255.255 What would be the command line I need to enter? I am still adjusting to non-NT world, so I need a bit help. I keep on getting 2 systems constantly wasting my time with their attempts to connect ot 255.255.255.255 and 0.0.

Re: Ipchains vs Iptables question

2002-03-21 Thread Bill Crawford
On Thu, 21 Mar 2002, Ashwin Khandare wrote: > Do you know of any script that software ipchains commands to iptables ? I don't, but I've never looked for one. Seriously though, it shouldn't be too hard to do it by hand unless you have a truly internecine set of rules. Doing the first few steps

Re: Ipchains vs Iptables question

2002-03-20 Thread Kerry Miller
Bill Crawford > Sent: Tuesday, March 19, 2002 5:43 PM > To: [EMAIL PROTECTED] > Subject: Re: Ipchains vs Iptables question > > > On Tue, 19 Mar 2002, Kerry Miller wrote: > > > We have 2 firewalls running on ipchains now. I'm not too great with > > ipchains yet

RE: Ipchains vs Iptables question

2002-03-19 Thread Brian
Iptables question On Tue, 19 Mar 2002, Kerry Miller wrote: > We have 2 firewalls running on ipchains now. I'm not too great with > ipchains yet and haven't even tried iptables, but since I already have > working firewalls w/ ipchains, is there a way to use my current scripts with &g

Re: Ipchains vs Iptables question

2002-03-19 Thread Bill Crawford
On Tue, 19 Mar 2002, Kerry Miller wrote: > We have 2 firewalls running on ipchains now. I'm not too great with > ipchains yet and haven't even tried iptables, but since I already have > working firewalls w/ ipchains, is there a way to use my current scripts with > iptables? How much different i

Re: Ipchains vs Iptables question

2002-03-19 Thread Keith Morse
On Tue, 19 Mar 2002, Kerry Miller wrote: > We have 2 firewalls running on ipchains now. I'm not too great with > ipchains yet and haven't even tried iptables, but since I already have > working firewalls w/ ipchains, is there a way to use my current scripts with > iptables? How much different i

Ipchains vs Iptables question

2002-03-19 Thread Kerry Miller
We have 2 firewalls running on ipchains now. I'm not too great with ipchains yet and haven't even tried iptables, but since I already have working firewalls w/ ipchains, is there a way to use my current scripts with iptables? How much different is the syntax, or is there a way to import the ipch

Easy IPTABLES question

2002-01-29 Thread Brett Charbeneau
Yowza, I'm trying to set up a conservative INNER firewall for our public workstations. Rules that, via NAT, will allow them to get out to the Internet to their heart's content, but won't allow them to do much but telnet to our catalog and pull port 80 requests from our web server WITHIN o

iptables question

2002-01-29 Thread Hernan Brun
Hi folks!! I Have runing Redhat 7.1 server with iptables. I want to only forward all packets, no filtering. What is the simple rule to do this? I want to try this, because some conference programs cant send files, cant comunicate, etc. There are another solution? Thanks in advance.. Hernan Brun -

Re: IPTables question

2001-11-17 Thread Andreas Hansson
> I'd recommend upgrading the rpm for iptables as this is one of the > fixes. Current version is iptables-1.2.4-0 I believe. Ah, up2date didn't update that automatically because of my manual fix. Now I've forced it to apply the update. However, immediately after updating, i tried "service iptable

Re: IPTables question

2001-11-17 Thread Jack Bowling
** Reply to message from Andreas Hansson <[EMAIL PROTECTED]> on Sat, 17 Nov 2001 14:51:32 +0100 > It might be safer to just edit /etc/sysconfig/iptables yourself. It's > mostly just a list of iptables commands plus saved statistics for the > chains. If you save it once you'll see what it's sup

Re: IPTables question

2001-11-17 Thread Keith Morse
On Sat, 17 Nov 2001, Andreas Hansson wrote: > Yes. The easiest way to do that is "service iptables save" which will > execute iptables-save for you. There seems to be a few bugs, at least in the > version I use (iptables-1.2.1a-1) so you might want to do "service iptables I'd recommend upgradin

Re: IPTables question

2001-11-17 Thread Andreas Hansson
> > i use in seawolf > > # iptables-save > /etc/sysconfig/iptables > > # chmod go-r /etc/sysconfig/iptables > > > > but this only save iptables command > > Ok, I take it this means that if I were to issue a series of iptables commands at the prompt, then I could flush those rules that were loaded

Re: IPTables question

2001-11-16 Thread Lewi
On Fri, Nov 16, 2001 at 10:35:54PM -0800, Monte Milanuk wrote: > On Sat, 17 Nov 2001 10:56:20 -0500 > Lewi <[EMAIL PROTECTED]> wrote: > > > > read your /etc/init.d/iptables > > > > I did. But some of us don't read shell scripting too well yet ;) Hence I'm asking >for a minor translation. >

Re: IPTables question

2001-11-16 Thread Monte Milanuk
On Sat, 17 Nov 2001 10:56:20 -0500 Lewi <[EMAIL PROTECTED]> wrote: > read your /etc/init.d/iptables > I did. But some of us don't read shell scripting too well yet ;) Hence I'm asking for a minor translation. > i use in seawolf > # iptables-save > /etc/sysconfig/iptables > # chmod go-r /et

Re: IPTables question

2001-11-16 Thread Lewi
On Fri, Nov 16, 2001 at 07:39:12PM -0800, Monte Milanuk wrote: > I inadvertently fragged my LAN server, so I am taking the opportunity to reinstall >KRUD 7.1 and set things up a bit tighter this time around. Previously I used >ipchains via lokkit to config my firewall. This time I'd like to us

IPTables question

2001-11-16 Thread Monte Milanuk
I inadvertently fragged my LAN server, so I am taking the opportunity to reinstall KRUD 7.1 and set things up a bit tighter this time around. Previously I used ipchains via lokkit to config my firewall. This time I'd like to use iptables. I have a book on Securing RH Linux 7.1, and have brow