Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Mike D <mdm@optonline.net>
To: Didier Hung Wan Luk <DidierH@frci.net>,
	Netfilter Mailing List <netfilter@lists.netfilter.org>
Subject: REMOVE FROM LIST. THIS IS SPAM
Date: Sat, 07 Sep 2002 08:15:50 -0400	[thread overview]
Message-ID: <001c01c25668$4e06ef20$c7fea8c0@louie> (raw)
In-Reply-To: 39778BFB9C25BA429794B15B50AEC78104B194@server-dcms


----- Original Message -----
From: "Didier Hung Wan Luk" <DidierH@frci.net>
To: "Netfilter Mailing List" <netfilter@lists.netfilter.org>
Sent: Saturday, September 07, 2002 5:39 AM
Subject: Iptables rules...


> Hi All,
>
>
> I am new to firewall/iptables can someone help me to clear up some
concepts about firewalling?
>
> If my default rule for the input chain of my external interface is DROP
need I again specify to DROP packets in the INPUT chain of my external
interface?
>
> i.e..
>
> #My Default rule
> iptables -P INPUT DROP
>
> #Drop all attempts on my ext. interface trough port 6000:6063
>
> iptables -A INPUT -i ppp0 -p tcp --dport 6000:6063 -j DROP
>
> If I am right I think that I need not include a rule again saying to drop
packets to my 6000;6063 ports since I do not have a rule saying to accept
connections on these ports...
>
> Thanks,
>
> Didier Hung Wan Luk
>
>
>



  parent reply	other threads:[~2002-09-07 12:15 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-09-07  9:39 Iptables rules Didier Hung Wan Luk
2002-09-07 10:36 ` Antony Stone
2002-09-07 12:15 ` Mike D [this message]
2002-09-07 13:39   ` REMOVE FROM LIST. THIS IS SPAM Anders Fugmann
2002-09-07 16:17     ` Robin Lynn Frank

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='001c01c25668$4e06ef20$c7fea8c0@louie' \
    --to=mdm@optonline.net \
    --cc=DidierH@frci.net \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox