Re: question about SSH / IPTABLES

[Guille -bisho- <bisho@eurielec.etsit.upm.es>]

A simpler way would be use:

- The connection tracking abilities of the iptables.
  For example DROP NEW connections from upper ports
  (this way you are not going to have problems with stablished
  conections as the ssh login into the machine)

OR:

- At TCP level, match flag like SYN to avoid stablishing conections.
  (faster than the conn traq, and requires less memory)

- Use this in conjuction with the user id matchings

- DROP all UDP traffic (it has no connections, so we can't limit
  stablishing new connections from our server)

All this of course on the OUTPUT chain

-- 
        .,,,   Guillermo Pérez    -=] 24/01/2003 [=-
      _' .,,,,  - bisho@ ( onirica.com | eurielec.etsit.upm.es )
     (v)/ ,''
      ( \/    ::            Marea Negra. Políticos ciegos.            ::
bisho! ``\\