Re: Ports to block?
Thu, Apr 05, 2001 at 09:38:46PM +0100, Steve Ball wrote:
> It is most secure to block everything and only open the ports that are
> absolutely necessary.
ok, this is clear. What's the way you ppl do that throught ipchains/iptables
? Is it better to use the ACCEPT policy and then DENY all or use the DENY
policy and ACCEPT only ports needed ? I use the first 'cause so I can log
all packet that are denied...
ipchains -P input ACCEPT
ipchains -A input -j DENY -l
+--------+ Maybe you are searching for freedom
| Enrico | Maybe you can't find it anywhere
+--------+ I found it in linux.......
``I think he has a Napoleonic concept of himself and his company, an arrogance
that derives from power and unalloyed success, with no leavening hard
experience, no reverses,'' Judge Thomas Penfield Jackson says of Bill Gates.