From mboxrd@z Thu Jan 1 00:00:00 1970 From: "chris" Date: Thu, 14 Feb 2002 17:47:47 +0000 Subject: [LARTC] simple ipchain filter MIME-Version: 1 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0041_01C1B53C.A8A90940" Message-Id: List-Id: To: lartc@vger.kernel.org This is a multi-part message in MIME format. ------=_NextPart_000_0041_01C1B53C.A8A90940 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I am new to the world of ipchains. I wanted to know if the following = rule would deny all snmp traffic on my Internet link(Serial4), but let me use snmp internally.=20 The problem is that with the latest bug in snmp, even shutting it off = doesnt help in some cases. I also rely on snmp for network health info. = I would like to just block all snmp traffic at the border. Since this = linux router is acting as my border router, this seems to be the best = place to start ipchains -A input -i Serial4 -p udp -d 0/0 161 -j DENY --log ipchains -A input -i Serial4 -p udp -d 0/0 162 -j DENY --log Is there a better way to stop all snmp traffic at the border? Thanks, Chris ------=_NextPart_000_0041_01C1B53C.A8A90940 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

I am new to the world of ipchains. I = wanted to know=20 if the following rule would deny all snmp traffic

on my Internet link(Serial4), but let = me use snmp=20 internally.

The problem is that with the latest bug = in snmp,=20 even shutting it off doesnt help in some cases. I also rely on snmp for = network=20 health info. I would like to just block all snmp traffic at = the=20 border. Since this linux router is acting as my border router, this = seems to be=20 the best place to start

ipchains -A input -i Serial4 -p udp -d = 0/0 161 -j=20 DENY --log

ipchains -A input -i Serial4 -p udp -d = 0/0 162 -j=20 DENY --log

Is there a better way to stop all snmp = traffic at=20 the border?

Thanks,

Chris

------=_NextPart_000_0041_01C1B53C.A8A90940-- _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/