From: "Rob Sterenborg" <rob@sterenborg.info>
To: netfilter@lists.netfilter.org
Subject: RE: Wol Magic Packets
Date: Thu, 24 Aug 2006 14:48:48 +0200 (CEST) [thread overview]
Message-ID: <57237.193.173.147.3.1156423728.squirrel@webmail.sterenborg.info> (raw)
In-Reply-To: <J4I52P$07AD17049DE455463CE6BF9E6D425F69@libero.it>
Would you please be so kind to keep this discussion on the list by replying to
it, not to me directly.
Thanks.
On Thu, August 24, 2006 14:23, claudio987\@libero\.it wrote:
>> Yes. Well, I also received an email from Sietske van Zanen who thought
>> more thoroughly than I did, but he hit the wrong butten and it was not sent
>> to the list. This was his answer and I have to agree with him:
>>
>>
>> [quote]
>> I do not see what use it is, to block this on your firewall. WoL is a
>> broadcast, hence it will already never traverse a firewall if it's configured
>> correctly. On the local LAN segment they will never pass a firewall before
>> reaching a LAN station. That's the whole idea of broadcasting.
>>
>> The best thing to do is disable WoL on the workstations.
>>
>>
>> -Sietse
>> [/quote]
>>
>> Gr,
>> Rob
>>
> how can I block wol packets? I must disable broadcasting? In what way? I wont
> to use wol only in my lan. I have a linux box router: 192.168.0.1 and 4 pc on
> lan 192.168.0.2 192.168.0.3 192.168.0.4 192.168.0.5. I must disable it with
> iptables on 192.168.0.1 (router). Thanks
Did you read Sietse's comment?
- WOL is a broadcast and broadcasts typically *do not pass* a router, in this
case your Linux firewall.
- If the WOL packet is coming from your LAN you *cannot* block it using your
Linux firewall, because the packets *do not pass through* it.
Disable the WOL feature on your clients, as Sietse suggested.
Gr,
Rob
next parent reply other threads:[~2006-08-24 12:48 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <J4I52P$07AD17049DE455463CE6BF9E6D425F69@libero.it>
2006-08-24 12:48 ` Rob Sterenborg [this message]
2006-08-29 11:38 Wol Magic Packets claudio987
2006-08-29 11:55 ` Rob Sterenborg
-- strict thread matches above, loose matches on Subject: below --
2006-08-28 19:45 claudio987
2006-08-29 5:54 ` Rob Sterenborg
2006-08-28 13:03 claudio987
2006-08-28 16:25 ` Rob Sterenborg
2006-08-24 16:00 claudio987
[not found] <J4H7AL$3755F2FB0EF94967751D3C49D3390021@libero.it>
2006-08-24 5:45 ` Rob Sterenborg
2006-08-23 9:33 claudio987
2006-08-23 10:13 ` Rob Sterenborg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=57237.193.173.147.3.1156423728.squirrel@webmail.sterenborg.info \
--to=rob@sterenborg.info \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox