well ... if you put a filter using iptables and you are using tcpdump (or snort) to see if the packets are still coming in, of course that you'll see that the packets are still coming in, if you are monitoring the fastethernet (or ethernet) interface on your router, because tcpdump and/or snort are capturing the packets BEFORE iptables. I hope I'm right :) On Wed, May 14, 2003 at 10:50:39AM +0200, Andres Taylor wrote: > On ons, 2003-05-14 at 10:19, Subredu Manuel wrote: > > port 411 is the standard port for direct connect, and matsrob... is the hub > > address. You can block the hub address :D > > I am well aware that 411 is the standard DC port, but I was under the > impression that it talked TCP and not UDP. And, I've tried blocking the > address, as I stated in my first mail, but it doesn't work. And no, I'm > not connecting to a DC Hub on that address. > > Andrés
Attachment:
pgpkVywRSeLqG.pgp
Description: PGP signature