RE: SNAT firewall maybe compromised. Misconfiguration?

["Thiago Lima " <thiagolima@webforce.com.br>]

No, I did not. 

The script was cut off, but only in some portforwarding rules, just more
5 redirects. 

Should I use this -P INPUT DROP -P FORWARD DROP in both interfaces? In
the end of my script?

thanks
thiago.


-----Original Message-----
From: Alistair Tonner [mailto:Alistair@nerdnet.ca] 
S

	You aren't showing us your policies, and that leads me to
believe
	that the chain policies might be ACCEPT ... which is very not
good.
	Also it ranter looks like this script was cut off.... so I can't
be sure...
	
	$IPTABLES -P INPUT DROP
	$IPTABLES -P FORWARD DROP
	
	?? do you do this at all??
-- 

	Alistair Tonner
	nerdnet.ca
	Senior Systems Analyst - RSS
	
     Any sufficiently advanced technology will have the appearance of
magic.
	Lets get magical!