From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?iso-8859-1?q?Luis=20GUSTAVO?= Subject: spyware Date: Fri, 11 Jun 2004 13:00:47 -0300 (ART) Sender: netfilter-admin@lists.netfilter.org Message-ID: <20040611160047.73593.qmail@web50210.mail.yahoo.com> Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org how can i add rules for block spyware with iptables, or some program for block spyware in my linux router. example: router ---------------> clients ---> windows 9x Linux | iptables | blocking spyware | _______________________ ok. ===== Luis GUSTAVO lgpcf(arroba)yahoo(ponto)com(ponto)br +55 (21) 9891-3560 --------------------------------------------------------------------------------- ______________________________________________________________________ Yahoo! Messenger - Fale com seus amigos online. Instale agora! http://br.download.yahoo.com/messenger/ From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Syed Faisal Gillani" Subject: deleting specific rule ... Date: Sat, 12 Jun 2004 01:13:26 +0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <001001c44ff0$8ec113a0$0300000a@serverxx> References: <20040611160047.73593.qmail@web50210.mail.yahoo.com> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_000D_01C4501A.76D50420" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_000D_01C4501A.76D50420 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable here is the list of rule in my iptables=20 -------------------------------------------------------------------------= ------- Chain INPUT (policy ACCEPT) target prot opt source destination DROP all -- anywhere anywhere MAC = 00:A0:C9:A0:B8:A5 DROP all -- anywhere anywhere MAC = 00:10:A4:9F:B5:27 DROP all -- anywhere anywhere MAC = 00:C0:26:78:04:D2 Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination -------------------------------------------------------------------------= ------- now i want to delete this rule .. DROP all -- anywhere anywhere MAC = 00:A0:C9:A0:B8:A5 wat will be the command in doing so ? thanks Faisal ------=_NextPart_000_000D_01C4501A.76D50420 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

here is the list of rule in my iptables =

Chain INPUT (policy=20 ACCEPT)
target     prot opt=20 source           &= nbsp;  =20 destination
DROP       all = -- =20 anywhere           = ; =20 anywhere           MAC = 00:A0:C9:A0:B8:A5
DROP       all = -- =20 anywhere           = ; =20 anywhere           MAC = 00:10:A4:9F:B5:27
DROP       all = -- =20 anywhere           = ; =20 anywhere           MAC = 00:C0:26:78:04:D2

Chain FORWARD (policy=20 ACCEPT)
target prot opt=20 source &= nbsp; =20 destination

Chain OUTPUT (policy=20 ACCEPT)
target prot opt=20 source &= nbsp; =20 destination

now i want to delete this rule ..

DROP all -- =20 anywhere = ; =20 anywhere MAC = 00:A0:C9:A0:B8:A5

wat will be the command in doing so ?

thanks

Faisal

------=_NextPart_000_000D_01C4501A.76D50420-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alistair Tonner Subject: Re: deleting specific rule ... Date: Fri, 11 Jun 2004 18:15:35 -0400 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200406111815.35432.Alistair@nerdnet.ca> References: <20040611160047.73593.qmail@web50210.mail.yahoo.com> <001001c44ff0$8ec113a0$0300000a@serverxx> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <001001c44ff0$8ec113a0$0300000a@serverxx> Content-Disposition: inline Content-Description: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org On June 11, 2004 04:13 pm, Syed Faisal Gillani wrote: > here is the list of rule in my iptables > > --------------------------------------------------------------------------- >----- > > Chain INPUT (policy ACCEPT) > target prot opt source destination > DROP all -- anywhere anywhere MAC > 00:A0:C9:A0:B8:A5 DROP all -- anywhere anywhere > MAC 00:10:A4:9F:B5:27 DROP all -- anywhere anywhere > MAC 00:C0:26:78:04:D2 > > Chain FORWARD (policy ACCEPT) > target prot opt source destination > > Chain OUTPUT (policy ACCEPT) > target prot opt source destination > > > > --------------------------------------------------------------------------- >----- > > now i want to delete this rule .. > > DROP all -- anywhere anywhere MAC > 00:A0:C9:A0:B8:A5 > > wat will be the command in doing so ? > Hi -- relist the rules iptables -L -n --line-numbers will number each line. iptables -D INPUT x Alistair Tonner > thanks > Faisal From mboxrd@z Thu Jan 1 00:00:00 1970 From: Damjan Subject: Re: deleting specific rule ... Date: Mon, 14 Jun 2004 17:04:14 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20040614150414.GA26186@legolas.on.net.mk> References: <20040611160047.73593.qmail@web50210.mail.yahoo.com> <001001c44ff0$8ec113a0$0300000a@serverxx> <200406111815.35432.Alistair@nerdnet.ca> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: Content-Disposition: inline In-Reply-To: <200406111815.35432.Alistair@nerdnet.ca> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="utf-8" To: netfilter@lists.netfilter.org Cc: Alistair Tonner > > here is the list of rule in my iptables > > > > now i want to delete this rule .. > > > > wat will be the command in doing so ? >=20 > Hi -- relist the rules=20 >=20 > iptables -L -n --line-numbers >=20 > will number each line. >=20 > iptables -D INPUT x Unfourtenatelly there's a chance that between those two commands the line-number of the required rule could change. --=20 damjan | =D0=B4=D0=B0=D0=BC=D1=98=D0=B0=D0=BD This is my jabber ID --> damjan@bagra.net.mk <-- not my mail address!!! From mboxrd@z Thu Jan 1 00:00:00 1970 From: Antony Stone Subject: Re: deleting specific rule ... Date: Mon, 14 Jun 2004 16:25:19 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200406141625.19755.Antony@Soft-Solutions.co.uk> References: <20040611160047.73593.qmail@web50210.mail.yahoo.com> <200406111815.35432.Alistair@nerdnet.ca> <20040614150414.GA26186@legolas.on.net.mk> Reply-To: netfilter@lists.netfilter.org Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Return-path: In-Reply-To: <20040614150414.GA26186@legolas.on.net.mk> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org On Monday 14 June 2004 4:04 pm, Damjan wrote: > > > here is the list of rule in my iptables > > > > > > now i want to delete this rule .. > > > > > > wat will be the command in doing so ? > > > > Hi -- relist the rules > > > > iptables -L -n --line-numbers > > > > will number each line. > > > > iptables -D INPUT x > > Unfourtenatelly there's a chance that between those two commands the > line-number of the required rule could change. I don't quite understand why (although I agree that it's remotely possible), so how about using -D instead of -A (or -I) with exactly the same parameters as you specified when adding the rule? eg: if you add a rule using iptables -A FORWARD -p tcp --dport 80 -s 10.20.30.40 -d 172.16.17.18 -j REJECT you can delete it using iptables -D FORWARD -p tcp --dport 80 -s 10.20.30.40 -d 172.16.17.18 -j REJECT Where it happens to be in the ruleset when you delete it is irrelevant. Regards, Antony. -- People who use Microsoft software should be certified. Please reply to the list; please don't CC me. From mboxrd@z Thu Jan 1 00:00:00 1970 From: Damjan Subject: Re: deleting specific rule ... Date: Mon, 14 Jun 2004 17:58:24 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20040614155824.GA5532@legolas.on.net.mk> References: <20040611160047.73593.qmail@web50210.mail.yahoo.com> <200406111815.35432.Alistair@nerdnet.ca> <20040614150414.GA26186@legolas.on.net.mk> <200406141625.19755.Antony@Soft-Solutions.co.uk> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: Content-Disposition: inline In-Reply-To: <200406141625.19755.Antony@Soft-Solutions.co.uk> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="utf-8" To: netfilter@lists.netfilter.org > I don't quite understand why (although I agree that it's remotely possi= ble),=20 It is especially possible when you have some kind of daemon that's automatically inserting netfilter rules :) > so how about using -D instead of -A (or -I) with exactly the same param= eters=20 > as you specified when adding the rule? Unfortunatelly that doesn't work with a -m quota rule. Since the delete will the exact state of the quota (that you can't atomically get) :( --=20 damjan | =D0=B4=D0=B0=D0=BC=D1=98=D0=B0=D0=BD This is my jabber ID --> damjan@bagra.net.mk <-- not my mail address!!!