Re: Security Issues...


Subject: Re: Security Issues...
From: Donovan Warren (aramis_@Bacil.DYNDNS.ORG)
Date: Tue Aug 14 2001 - 06:49:07 MDT


Is there a good tutorial or book on IPChains available, or (better, maybe) a
general Linux Security book or tutorial that covers a variety of
firewall/NAT/security tools? Stepwise has a thing on TCPWrappers and xinetd,
but that's not what I'm looking for.

TIA :-)

On Monday 13 August 2001 10:39, Brent Cantrell is purported to have said:

> While port masking is done by ipchains, it's not the same as blocking ports
> and such, it's sole purpose it to act as NAT translation. Within your
> ipchains script, you also specify what ports will accept connections, IE:
> ipchains -A -s hackers.com -d 65.88.92.9 80 -p tcp -j DENY what this
> particular line does, is denies anyone from the domain hackers.com from
> accessing your webserver (65.88.92.9 port 80 using protocol tcp). You can
> make your firewall dissapear, ipchains -A input -p udp -j DENY , setup
> dmz's port forwarding, anything you want to do. and you don't have to
> dedicate a machine to do it, just set it up from within the machine you're
> providing the services on.



This archive was generated by hypermail 2a24 : Tue Aug 14 2001 - 05:57:48 MDT