All of lore.kernel.org
 help / color / mirror / Atom feed
From: Stephen Isard <S.Isard@DeleteThised.ac.uk>
To: linux-diald@vger.kernel.org
Subject: referring to own IP in filter rules
Date: Mon, 27 Jan 2003 14:21:28 +0000	[thread overview]
Message-ID: <3E354068.3B7C@ed.ac.uk> (raw)

Hello,

Is there a convenient way to refer to my machine's own IP address in
diald filter rules, where the address is assigned dynamically by my ISP
when I dial in?

I've been using diald for several years and it works fine.  My problem
is that increasingly I find that the line is being kept up by attempted
connections from random sites.  I take it these are hackers, or machines
that have been hijacked by hackers.  As far as I can tell, my firewall
and tcp wrappers are successfully rejecting the connection attempts so
far, but diald is opening a connection set for them and giving it a
default timeout.  What I'd like to do is write a rule saying something
like "ignore any packet addressed to a port number lower than 900 on my
machine", but the address of my machine is different each time I dial
up.

I can imagine writing an ip-up script that uses sed to rewrite the
standard.filter file after the link comes up and then sends a reset to
diald.ctl, but that sounds messy and error-prone and I'd rather write
standard.filter to say what I really mean in the first place, if there
is some way of doing it.

Thanks.

Stephen Isard

                 reply	other threads:[~2003-01-27 14:21 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3E354068.3B7C@ed.ac.uk \
    --to=s.isard@deletethised.ac.uk \
    --cc=linux-diald@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.