All of lore.kernel.org
 help / color / mirror / Atom feed
From: "chris" <lists@powernet.net>
To: lartc@vger.kernel.org
Subject: [LARTC] simple ipchain filter
Date: Thu, 14 Feb 2002 17:47:47 +0000	[thread overview]
Message-ID: <marc-lartc-101370887819916@msgid-missing> (raw)

[-- Attachment #1: Type: text/plain, Size: 677 bytes --]

I am new to the world of ipchains. I wanted to know if the following rule would deny all snmp traffic
on my Internet link(Serial4), but let me use snmp internally. 
The problem is that with the latest bug in snmp, even shutting it off doesnt help in some cases. I also rely on snmp for network health info. I would like to just block all snmp traffic at the border. Since this linux router is acting as my border router, this seems to be the best place to start

ipchains -A input -i Serial4 -p udp -d 0/0 161 -j DENY --log
ipchains -A input -i Serial4 -p udp -d 0/0 162 -j DENY --log

Is there a better way to stop all snmp traffic at the border?


Thanks,
 Chris

[-- Attachment #2: Type: text/html, Size: 1517 bytes --]

             reply	other threads:[~2002-02-14 17:47 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-02-14 17:47 chris [this message]
2002-02-15 15:28 ` [LARTC] simple ipchain filter bert hubert
2002-02-15 18:02 ` chris

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=marc-lartc-101370887819916@msgid-missing \
    --to=lists@powernet.net \
    --cc=lartc@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.