Re: woody firewall broken?
Davi Leal écrivait :
> I have added the iptables filter:
> iptables -A FORWARD -p tcp -d 194.224.7.3 --dport 112 -j REJECT
You may better do this:
iptables -A INPUT -p tcp -m tcp --dport 113 -m state --state NEW \
-j REJECT --reject-with tcp-reset
It simulates a "not-open" port and not a "filtered" port, and only
for new connections so it keeps logging TCP ACK if configured so.
Regards, J.C.
--
To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: