From mboxrd@z Thu Jan  1 00:00:00 1970
From: "Thiago Lima " <thiagolima@webforce.com.br>
Subject: RE: SNAT firewall maybe compromised. Misconfiguration?
Date: Tue, 29 Apr 2003 12:09:22 -0300
Sender: netfilter-admin@lists.netfilter.org
Message-ID: <004301c30e61$541d5190$1800a8c0@medusa>
References: <200304291055.21445.Alistair@nerdnet.ca>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <netfilter-admin@lists.netfilter.org>
In-Reply-To: <200304291055.21445.Alistair@nerdnet.ca>
Errors-To: netfilter-admin@lists.netfilter.org
List-Help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-Post: <mailto:netfilter@lists.netfilter.org>
List-Subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
List-Archive: <https://lists.netfilter.org/pipermail/netfilter/>
Content-Type: text/plain; charset="us-ascii"
To: Alistair@nerdnet.ca, netfilter@lists.netfilter.org


No, I did not. 

The script was cut off, but only in some portforwarding rules, just more
5 redirects. 

Should I use this -P INPUT DROP -P FORWARD DROP in both interfaces? In
the end of my script?

thanks
thiago.


-----Original Message-----
From: Alistair Tonner [mailto:Alistair@nerdnet.ca] 
S

	You aren't showing us your policies, and that leads me to
believe
	that the chain policies might be ACCEPT ... which is very not
good.
	Also it ranter looks like this script was cut off.... so I can't
be sure...
	
	$IPTABLES -P INPUT DROP
	$IPTABLES -P FORWARD DROP
	
	?? do you do this at all??
-- 

	Alistair Tonner
	nerdnet.ca
	Senior Systems Analyst - RSS
	
     Any sufficiently advanced technology will have the appearance of
magic.
	Lets get magical!