Re: firewall conf

2003-09-05 Thread ivo Tijhaar
the latest firewall conf already but there is one question remaining: With a port scan with nmap -sS TCP SYN ip-address. Every port will give filtered is it possible to hide the port totally so no syn will be returned by the system. -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https

Re: Fw: firewall conf

2003-09-04 Thread Robert Jones
Rodolfo J. Paiz wrote: At 15:14 9/3/2003 -0500, you wrote: Okay, you're doing a bunch of stuff with which I am unfamiliar (especially that --state NEW,INVALID stuff), but there are a couple of things that I think could help you... Please allow me to suggest that you both take a good look at

Re: Fw: firewall conf

2003-09-04 Thread Rodolfo J. Paiz
At 07:16 9/4/2003 -0500, you wrote: I have a stupid question for you. When I installed 7.2 (later 7.3) I chose ipchains rather than iptables so that I could use my old 6.x firewall. What must I do to switch to iptables? There are no stupid questions, only stupid people. You can always tell a

RE: firewall conf

2003-09-04 Thread Ivo Tijhaar
Hi, Thanks i modified my firewall now it works for me. I made the following entries: :FORWARD ACCEPT [0:0] # Accept all forwarded packets. In my case there is no NAT, so this is ok. :INPUT DROP [0:0] # Drop all incoming packets.

Re: firewall conf

2003-09-04 Thread Benjamin J. Weiss
Hi, Thanks i modified my firewall now it works for me. I made the following entries: :FORWARD ACCEPT [0:0] # Accept all forwarded packets. In my case there is no NAT, so this is ok. :INPUT DROP [0:0] # Drop all incoming packets. :OUTPUT ACCEPT [0:0] # Accept all outgoing packets. So no

Re: firewall conf

2003-09-04 Thread Ivo Tijhaar
I need FTP my clients need to upload there webpages because the server is a part of a hosting company. I don't want to give anonymous access to anyone. Every user is know to me, and is chrooted to her home directorie they can't come outside this directory even with a symlink access is denied. And

Re: firewall conf

2003-09-04 Thread Rodolfo J. Paiz
At 21:50 9/4/2003 +0200, you wrote: I need FTP my clients need to upload there webpages because the server is a part of a hosting company. I don't want to give anonymous access to anyone. Every user is know to me, and is chrooted to her home directorie they can't come outside this directory even

firewall conf

2003-09-03 Thread Ivo Tijhaar
Hi, I'm using redhat 9.0 and the latest webmin. Now i want to configure the firewall that the ip addresses 213.132.174.75, 127.0.0.1, 80.242.234.70 and 62.131.19.121 with webmin only can access port 1 tcp/udp. I only get one ip address working not all. Any body any ideas? -- redhat-list

Re: firewall conf

2003-09-03 Thread Benjamin J. Weiss
Hi, I'm using redhat 9.0 and the latest webmin. Now i want to configure the firewall that the ip addresses 213.132.174.75, 127.0.0.1, 80.242.234.70 and 62.131.19.121 with webmin only can access port 1 tcp/udp. I only get one ip address working not all. Any body any ideas? What is the

Fw: firewall conf

2003-09-03 Thread Benjamin J. Weiss
My conf looks like this: # Generated by iptables-save v1.2.7a on Sun Jul 13 21:22:53 2003 *nat :PREROUTING ACCEPT [38:2291] :POSTROUTING ACCEPT [10:1360] :OUTPUT ACCEPT [10:1360] COMMIT # Completed on Sun Jul 13 21:22:53 2003 # Generated by iptables-save v1.2.7a on Sun Jul 13 21:22:53

Re: Fw: firewall conf

2003-09-03 Thread Rodolfo J. Paiz
At 15:14 9/3/2003 -0500, you wrote: Okay, you're doing a bunch of stuff with which I am unfamiliar (especially that --state NEW,INVALID stuff), but there are a couple of things that I think could help you... Please allow me to suggest that you both take a good look at Shorewall

Re: Fw: firewall conf

2003-09-03 Thread Benjamin J. Weiss
On Wed, 3 Sep 2003, Rodolfo J. Paiz wrote: At 15:14 9/3/2003 -0500, you wrote: Okay, you're doing a bunch of stuff with which I am unfamiliar (especially that --state NEW,INVALID stuff), but there are a couple of things that I think could help you... Please allow me to suggest that you

Re: Fw: firewall conf

2003-09-03 Thread Rodolfo J. Paiz
At 21:44 9/3/2003 -0500, you wrote: I really appreciate the suggestion, and I've seen shorewall mentioned here before. However, I've got other reasons that dictate that I learn the ins and outs of iptables and NAT, down to the nitty-gritty details. *grin* OK... Shorewall as a learning tool, then.