From mboxrd@z Thu Jan 1 00:00:00 1970 From: "HTB" Subject: block mirc, messenger Date: Thu, 19 Jun 2003 16:16:05 +0700 Sender: netfilter-admin@lists.netfilter.org Message-ID: <062e01c33643$69dee570$0300a8c0@medannic> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_062B_01C3367E.15B839C0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_062B_01C3367E.15B839C0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello ,=20 I already install RH. 8, with 2 interface (eth0 10.10.10.8), (eth1 = 192.168.1.1), i want blocking mirc, messeger. I type this command /sbin/iptables -I INPUT -i eth0 -p tcp -s 10.10.10.8/32 --dport 6667 -j = DROP but I still can running mirc. pls help me to solv this problem HTB ------=_NextPart_000_062B_01C3367E.15B839C0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hello ,

I already install RH. 8, with 2 = interface (eth0=20 10.10.10.8), (eth1 192.168.1.1), i want blocking mirc, messeger. I type = this=20 command

/sbin/iptables -I INPUT -i eth0 -p tcp = -s=20 10.10.10.8/32 --dport 6667 -j DROP

but I still can running = mirc.

pls help me to solv this = problem

HTB

------=_NextPart_000_062B_01C3367E.15B839C0-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: narendra prabhu Subject: Re: block mirc, messenger Date: Thu, 19 Jun 2003 15:09:55 +0530 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3EF184EB.4030101@deeproot.co.in> References: <062e01c33643$69dee570$0300a8c0@medannic> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <062e01c33643$69dee570$0300a8c0@medannic> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org HTB wrote: > Hello , > > I already install RH. 8, with 2 interface (eth0 10.10.10.8), (eth1 > 192.168.1.1), i want blocking mirc, messeger. I type this command > > /sbin/iptables -I INPUT -i eth0 -p tcp -s 10.10.10.8/32 --dport 6667 > -j DROP Few things that you may interested to know Not all IRC server use listen at port number 6667 Are you using a proxy? My suggestion to you that is that instead going in this way, identifing the services you dont want to allow, identifing the services that you want to allow and disallow the rest of them. Hope this helps. //Narendra. From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ray Leach Subject: Re: block mirc, messenger Date: 19 Jun 2003 12:14:39 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1056017678.1446.26.camel@raylinux.internal> References: <062e01c33643$69dee570$0300a8c0@medannic> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-dd+sVOaIkrl5a6sYe1t7" Return-path: In-Reply-To: <062e01c33643$69dee570$0300a8c0@medannic> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: Netfilter Mailing List --=-dd+sVOaIkrl5a6sYe1t7 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable The INPUT chain (as specified in the docs) is for traffic destined for the machine (router/fw) itself. You were most likely looking for the FORWARD chain. Ray On Thu, 2003-06-19 at 11:16, HTB wrote: > Hello ,=20 > =20 > I already install RH. 8, with 2 interface (eth0 10.10.10.8), (eth1 > 192.168.1.1), i want blocking mirc, messeger. I type this command > =20 > /sbin/iptables -I INPUT -i eth0 -p tcp -s 10.10.10.8/32 --dport 6667 > -j DROP > =20 > but I still can running mirc. > =20 > pls help me to solv this problem > =20 > HTB > =20 --=20 -- Raymond Leach Network Support Specialist http://www.knowledgefactory.co.za "lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import" Key fingerprint =3D 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28 -- --=-dd+sVOaIkrl5a6sYe1t7 Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQA+8Y0Oh1fuR/Bv+ygRAhH+AKCl6QpM9/c54Tylwpsq0305f9vOFACePZxn dngnPBr9YMFw5rtsmeDTk8g= =/cH7 -----END PGP SIGNATURE----- --=-dd+sVOaIkrl5a6sYe1t7--