spyware

spyware

[Luis GUSTAVO]

how can i add rules for block spyware with iptables,
or some program for block spyware in my linux router.


example:

router ---------------> clients ---> windows 9x
Linux                 | 
iptables              |
blocking spyware      |
_______________________ 


ok.




=====

Luis GUSTAVO         lgpcf(arroba)yahoo(ponto)com(ponto)br
+55 (21) 9891-3560    
---------------------------------------------------------------------------------
 










______________________________________________________________________

Yahoo! Messenger - Fale com seus amigos online. Instale agora! 
http://br.download.yahoo.com/messenger/

deleting specific rule ...

[Syed Faisal Gillani]

[-- Attachment #1: Type: text/plain, Size: 902 bytes --]

here is the list of rule in my iptables 

--------------------------------------------------------------------------------

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere           MAC 00:A0:C9:A0:B8:A5
DROP       all  --  anywhere             anywhere           MAC 00:10:A4:9F:B5:27
DROP       all  --  anywhere             anywhere           MAC 00:C0:26:78:04:D2

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination



--------------------------------------------------------------------------------

now i want to delete this rule ..

DROP       all  --  anywhere             anywhere           MAC 00:A0:C9:A0:B8:A5

wat will be the command in doing so ?

thanks
Faisal

[-- Attachment #2: Type: text/html, Size: 2467 bytes --]

Re: deleting specific rule ...

[Alistair Tonner]

On June 11, 2004 04:13 pm, Syed Faisal Gillani wrote:
> here is the list of rule in my iptables
>
> ---------------------------------------------------------------------------
>-----
>
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
> DROP       all  --  anywhere             anywhere           MAC
> 00:A0:C9:A0:B8:A5 DROP       all  --  anywhere             anywhere        
>   MAC 00:10:A4:9F:B5:27 DROP       all  --  anywhere             anywhere  
>         MAC 00:C0:26:78:04:D2
>
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
>
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
>
>
>
> ---------------------------------------------------------------------------
>-----
>
> now i want to delete this rule ..
>
> DROP       all  --  anywhere             anywhere           MAC
> 00:A0:C9:A0:B8:A5
>
> wat will be the command in doing so ?
>

	Hi -- relist the rules 

	iptables -L -n --line-numbers

	will number each line.

	iptables -D INPUT x
	
	
	Alistair Tonner

> thanks
> Faisal

Re: deleting specific rule ...

[Damjan]

> > here is the list of rule in my iptables
> >
> > now i want to delete this rule ..
> >
> > wat will be the command in doing so ?
> 
> 	Hi -- relist the rules 
> 
> 	iptables -L -n --line-numbers
> 
> 	will number each line.
> 
> 	iptables -D INPUT x

Unfourtenatelly there's a chance that between those two commands the
line-number of the required rule could change.

-- 
damjan | дамјан
This is my jabber ID --> damjan@bagra.net.mk <-- not my mail address!!!

Re: deleting specific rule ...

[Antony Stone]

On Monday 14 June 2004 4:04 pm, Damjan wrote:

> > > here is the list of rule in my iptables
> > >
> > > now i want to delete this rule ..
> > >
> > > wat will be the command in doing so ?
> >
> > 	Hi -- relist the rules
> >
> > 	iptables -L -n --line-numbers
> >
> > 	will number each line.
> >
> > 	iptables -D INPUT x
>
> Unfourtenatelly there's a chance that between those two commands the
> line-number of the required rule could change.

I don't quite understand why (although I agree that it's remotely possible), 
so how about using -D instead of -A (or -I) with exactly the same parameters 
as you specified when adding the rule?

eg: if you add a rule using

iptables -A FORWARD -p tcp --dport 80 -s 10.20.30.40 -d 172.16.17.18 -j REJECT

you can delete it using

iptables -D FORWARD -p tcp --dport 80 -s 10.20.30.40 -d 172.16.17.18 -j REJECT

Where it happens to be in the ruleset when you delete it is irrelevant.

Regards,

Antony.

-- 
People who use Microsoft software should be certified.

                                                     Please reply to the list;
                                                           please don't CC me.

Re: deleting specific rule ...

[Damjan]

> I don't quite understand why (although I agree that it's remotely possible), 

It is especially possible when you have some kind of daemon that's
automatically inserting netfilter rules :)

> so how about using -D instead of -A (or -I) with exactly the same parameters 
> as you specified when adding the rule?

Unfortunatelly that doesn't work with a -m quota rule. Since the delete
will the exact state of the quota (that you can't atomically get) :(


-- 
damjan | дамјан
This is my jabber ID --> damjan@bagra.net.mk <-- not my mail address!!!