* Securing a Firewall
@ 2004-03-27 2:40 Ronny Fauth
2004-03-27 6:22 ` Rob Sterenborg
2004-03-27 13:55 ` Frank Gruellich
0 siblings, 2 replies; 3+ messages in thread
From: Ronny Fauth @ 2004-03-27 2:40 UTC (permalink / raw)
To: netfilter
How can i secure my iptables? I want to stealth all my ports and i want
that no ping is awnsered. If a port is stealthed can i access that port?
thnx
regards
^ permalink raw reply [flat|nested] 3+ messages in thread
* RE: Securing a Firewall
2004-03-27 2:40 Securing a Firewall Ronny Fauth
@ 2004-03-27 6:22 ` Rob Sterenborg
2004-03-27 13:55 ` Frank Gruellich
1 sibling, 0 replies; 3+ messages in thread
From: Rob Sterenborg @ 2004-03-27 6:22 UTC (permalink / raw)
To: netfilter
> How can i secure my iptables? I want to stealth all my ports
> and i want that no ping is awnsered. If a port is stealthed
Perhaps : iptables -P INPUT DROP
In which case you will not be able to reach your machine over the network.
But I think this is not what you want because then you wouldn't be receiving
the packets that some host *sent back to you*, in reply to your request.
To avoid this you would at least have :
iptables -P INPUT DROP
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
> can i access that port?
No. A port has to be open to accept connections to it.
If a port is filtered (in your words : stealth), nmap will show "filtered".
If a port is open and has a service listening on it, nmap will show "open".
If a port is open and has no service listening on it, nmap will show
"closed".
Gr,
Rob
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Securing a Firewall
2004-03-27 2:40 Securing a Firewall Ronny Fauth
2004-03-27 6:22 ` Rob Sterenborg
@ 2004-03-27 13:55 ` Frank Gruellich
1 sibling, 0 replies; 3+ messages in thread
From: Frank Gruellich @ 2004-03-27 13:55 UTC (permalink / raw)
To: netfilter
* Ronny Fauth <jadefalkner@imperium-noctem.de> 27. Mar 04:
> How can i secure my iptables?
RTFM. What do you want to protect from what?
> I want to stealth all my ports and i want that no ping is awnsered.
Why do you intend to break common internet standards? 'Stealth' is
useless, 'stealth' is not security, 'stealth' is marketing. Simply
don't do it (without good reasons).
> If a port is stealthed can i access that port?
No,
regards, Frank.
--
Sigmentation fault
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2004-03-27 13:55 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-03-27 2:40 Securing a Firewall Ronny Fauth
2004-03-27 6:22 ` Rob Sterenborg
2004-03-27 13:55 ` Frank Gruellich
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox