Re: firewall advice

[Rolf Kutz <kutz@netcologne.de>]

* Quoting andrew lattis (alattis@mindspring.com):

> ####
> #connections to lo
> $iptables -A OUTPUT -p ALL -o $lo_iface -s $lo_ip -j ACCEPT
> 
> #allow the rest
> $iptables -A OUTPUT -p ALL -o $eth_iface -s $eth_ip -j ACCEPT
> 
> #log the rest
> $iptables -A OUTPUT -m limit --limit $log_limit --limit-burst $log_limit_burst -p tcp -j LOG --log-prefix "output tcp:"
> $iptables -A OUTPUT -m limit --limit $log_limit --limit-burst $log_limit_burst -p udp -j LOG --log-prefix "output udp:"

You should not forget to log other protokols like
icmp, ... It's best to log any packet here.

- rk

-- 
Ahahahahaha! Ahahahaha! Aahahaha!
BEWARE!!!!!
Yrs sincerely
The Opera Ghost