Hi, strangely my netstat showed my 139 and 445 ports are open.
tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN Do I need specify -A INPUT -p tcp --dport 139 -j REJECT in iptables? For all INPUT has already set -P INPUT DROP, except open for 80, 443, 22, BTW, why need allow ping? from outside? 59 # Allow ping 60 -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT I know so little, thanks very much for your expilanation, Best regards, -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cag9cjmmyf4hi5akjdzox8nxew2lvbpnyu0asdytcjz9asb9...@mail.gmail.com