Re: Iptables config

To: Laurent Luyckx <laurent@luyckx.net>
Cc: Lars Roland Kristiansen <m00lrk@math.ku.dk>, debian-security@lists.debian.org
Subject: Re: Iptables config
From: Tim Haynes <debian@stirfried.vegetable.org.uk>
Date: 12 Apr 2002 13:26:12 +0100
Message-id: <[🔎] 861ydlp0gr.fsf@potato.vegetable.org.uk>
Reply-to: debian-reply@stirfried.vegetable.org.uk
In-reply-to: <[🔎] 1018613585.3cb6cf51a6b70@webmail.tiscali.be>
References: <[🔎] Pine.OSF.4.21.0204121322190.31426-100000@gram.math.ku.dk> <[🔎] 1018613585.3cb6cf51a6b70@webmail.tiscali.be>

Laurent Luyckx <laurent@luyckx.net> writes:

[snip]
> > i get "cant conect to smtp service" when trying to mail 
> 
> try by rejecting port 113 requests with :
> 
> iptables -I INPUT -p tcp -s 0/0 --dport 113 -i eth0 -j REJECT

If you're going to use -j REJECT for a TCP packet, you really ought to use
`--reject-with tcp-reset' as well. 

See <http://logi.cc/linux/reject_or_deny.php3> for more.

~Tim
-- 
<http://spodzone.org.uk/>

-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Reply to:

References:
- Re: Iptables config
  - From: Lars Roland Kristiansen <m00lrk@math.ku.dk>
- Re: Iptables config
  - From: Laurent Luyckx <laurent@luyckx.net>

Prev by Date: Re: Iptables config
Next by Date: Re: Iptables config
Previous by thread: Re: Iptables config
Next by thread: Re: Iptables config
Index(es):
- Date
- Thread