Re: Ports to block?

[Cherubini Enrico <kevin@bestkevin.com>]

Ciao,
 Thu, Apr 05, 2001 at 09:38:46PM +0100, Steve Ball wrote:

> It is most secure to block everything and only open the ports that are 
> absolutely necessary.
ok, this is clear. What's the way you ppl do that throught ipchains/iptables
? Is it better to use the ACCEPT policy and then DENY all or use the DENY
policy and ACCEPT only ports needed ? I use the first 'cause so I can log
all packet that are denied...

# Start
ipchains -P input ACCEPT
....
ipchains -A input -j DENY -l
# End

-- 


Bye
                            +--------+ Maybe you are searching for freedom
                            | Enrico |    Maybe you can't find it anywhere
                            +--------+          I found it in linux.......

``I think he has a Napoleonic concept of himself and his company, an arrogance 
    that derives from power and unalloyed success, with no leavening hard 
 experience, no reverses,'' Judge Thomas Penfield Jackson says of Bill Gates.