How to stop imesh with iptables

How to stop imesh with iptables

[Fernando La Gamba]

Hi, How to stop imesh with iptables?

Thaks!!

Fernando La Gamba


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.487 / Virus Database: 286 - Release Date: 1/6/2003

RE: How to stop imesh with iptables

[George Vieira]

Argh these P2P software... What ports does it use? Did you research it's protocol so you can block it's commands to the server/users?

Have you googled for any information about it?

Thanks,
____________________________________________
George Vieira
Systems Manager
georgev@citadelcomputer.com.au

Citadel Computer Systems Pty Ltd
http://www.citadelcomputer.com.au

Phone   : +61 2 9955 2644
HelpDesk: +61 2 9955 2698
 

-----Original Message-----
From: Fernando La Gamba [mailto:fernando.lagamba@fastrack.com.br]
Sent: Wednesday, June 11, 2003 3:30 AM
To: netfilter@lists.netfilter.org; coreteam@netfilter.org
Subject: How to stop imesh with iptables


Hi, How to stop imesh with iptables?

Thaks!!

Fernando La Gamba


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.487 / Virus Database: 286 - Release Date: 1/6/2003

RE: How to stop imesh with iptables

[Kevin McConnell]

--- George Vieira <georgev@citadelcomputer.com.au>
wrote:
> Argh these P2P software... What ports does it use?
> Did you research it's protocol so you can block it's
> commands to the server/users?

On a slightly OT note, just out of curiousity, am I
the only person that denies everything by default and
only allows the protocols through the firewall that I
feel people need to use? This keeps the average joe
from abusing bandwidth, but there will always be other
people who figure out how to pierce the FW using other
holes.



=====
Kevin C. McConnell --RHCE-- <Red Hat Certified Engineer>

__________________________________
Do you Yahoo!?
Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
http://calendar.yahoo.com

Re: How to stop imesh with iptables

[David Busby]

As always:
    Depends on the requirements of the firewall.

/B

----- Original Message ----- 
From: "Kevin McConnell" <kevymac@yahoo.com>
To: <netfilter@lists.netfilter.org>
Sent: Wednesday, June 11, 2003 13:05
Subject: RE: How to stop imesh with iptables


> 
> --- George Vieira <georgev@citadelcomputer.com.au>
> wrote:
> > Argh these P2P software... What ports does it use?
> > Did you research it's protocol so you can block it's
> > commands to the server/users?
> 
> On a slightly OT note, just out of curiousity, am I
> the only person that denies everything by default and
> only allows the protocols through the firewall that I
> feel people need to use? This keeps the average joe
> from abusing bandwidth, but there will always be other
> people who figure out how to pierce the FW using other
> holes.
> 
> 
> 
> =====
> Kevin C. McConnell --RHCE-- <Red Hat Certified Engineer>
> 
> __________________________________
> Do you Yahoo!?
> Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
> http://calendar.yahoo.com

Re: How to stop imesh with iptables

[Gadgeteer]

> From: "Kevin McConnell" <kevymac@yahoo.com>
> > am I
> > the only person that denies everything by default and
> > only allows the protocols through the firewall that I
> > feel people need to use? 

<rearranged nasty top post>

On Wednesday 11 June 2003 15:30, David Busby wrote:
> As always:
>     Depends on the requirements of the firewall.

I have yet to see a case made for other than default deny that was not full of 
holes     ....just like their firewalls 8-)

-- 
cheers,
Gadgeteer

Re: How to stop imesh with iptables

[Ramin Dousti]

> > > am I the only person that denies everything by default and
> > > only allows the protocols through the firewall that I
> > > feel people need to use? 
> >
> > As always:
> >     Depends on the requirements of the firewall.
> 
> I have yet to see a case made for other than default deny that was not full
> of holes     ....just like their firewalls 8-)

There is no doubt that the default "deny" and just opening the services that
are "required" to be accepted is _the_ requirement of any sane firewall.

Ramin

Re: How to stop imesh with iptables

[Thomas Kirk]

On Wed, Jun 11, 2003 at 01:05:17PM -0700, Kevin McConnell wrote:

> On a slightly OT note, just out of curiousity, am I
> the only person that denies everything by default and
> only allows the protocols through the firewall that I
> feel people need to use? This keeps the average joe
> from abusing bandwidth, but there will always be other
> people who figure out how to pierce the FW using other
> holes.

Nope thats the companypolicy where i work. Oh btw im the one that
formulates this policy ;-)

-- 
Venlig hilsen/Kind regards
Thomas Kirk
ARKENA
tlf/phone +4570233456
thomas(at)arkena(dot)com
Http://www.arkena.com


"Unfortunately, son, we Simpsons sometimes have to bend the rules
a little in order to hold our own." -- Homer Simpson