Re: iptables firewall

[Sven Hartge <sven@svenhartge.de>]

Mike McClain <mike.junk@nethere.com> wrote:

> I've run into a difficulty with iptables in that both GRC.com and
> PCFlank.com's firewall scans show ports 137-139 and 445 as blocked but
> not stealthed in spite of the fact that I have these statements in my
> firewall script:

>    iptables -A INPUT -p udp --dport 137:138 -j DROP
>    iptables -A INPUT -p tcp --dport 137:138 -j DROP
>    iptables -A INPUT -p tcp --dport 139 -j DROP
>    iptables -A INPUT -p tcp --dport 445 -j DROP
>    iptables -A OUTPUT -p udp --dport 137:138 -j DROP
>    iptables -A OUTPUT -p tcp --dport 137:138 -j DROP
>    iptables -A OUTPUT -p tcp --dport 139 -j DROP
>    iptables -A OUTPUT -p tcp --dport 445 -j DROP

> Both scans report all else stealthed.
> Suggestions?

Maybe your ISP already filters those ports?

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.