From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Dharmendra.T" Subject: Re: Any holes in this firewall script? Date: 04 Jun 2003 11:12:37 +0530 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1054705385.3434.0.camel@india> References: <20030603180849.B2402@gateway.junsun.net> <1054702862.2273.6.camel@india> <20030603220551.A2672@gateway.junsun.net> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=-Y+mgLKnbMUCVAQi+laMR" Return-path: In-Reply-To: <20030603220551.A2672@gateway.junsun.net> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: Jun Sun Cc: netfilter@lists.netfilter.org --=-Y+mgLKnbMUCVAQi+laMR Content-Type: text/plain Content-Transfer-Encoding: 7bit Yes, but after that you are allowing everything from all the interfaces. Which is not recommended to do so. Dharmu On Wed, 2003-06-04 at 10:35, Jun Sun wrote: On Wed, Jun 04, 2003 at 10:30:31AM +0530, Dharmendra.T wrote: > hi, > > I just don't see any firewalling (blocking) in the script. You are > simply allowing everything. Define clear rule like block all and allow > only wanted ports. > The default policy is set to "DROP" for the filter table. Jun -- Regards Dharmendra.T This message is intended for the addressee only. It may contain privileged or Confidential information. If you have received this message in error,please notify the sender and destroy the message immediately.Unauthorised use or reproduction of this message is strictly prohibited. --=-Y+mgLKnbMUCVAQi+laMR Content-Type: text/html; charset=utf-8 Yes, but after that you are allowing everything from all the interfaces.  Which is not recommended to do so.

Dharmu
On Wed, 2003-06-04 at 10:35, Jun Sun wrote: 
On Wed, Jun 04, 2003 at 10:30:31AM +0530, Dharmendra.T wrote:
> hi,
> 
>  I just don't see any firewalling (blocking) in the script. You are
> simply allowing everything. Define clear rule like block all and allow
> only wanted ports.
>

The default policy is set to "DROP" for the filter table.

Jun
-- 
Regards
Dharmendra.T


This message is intended for the addressee only. It may contain privileged or Confidential information. If you have received this message in error,please notify the sender and destroy the message immediately.Unauthorised use or reproduction of this message is strictly prohibited.
--=-Y+mgLKnbMUCVAQi+laMR--