Mike McClain <mike.j...@nethere.com> wrote:

> I've run into a difficulty with iptables in that both GRC.com and
> PCFlank.com's firewall scans show ports 137-139 and 445 as blocked but
> not stealthed in spite of the fact that I have these statements in my
> firewall script:

>    iptables -A INPUT -p udp --dport 137:138 -j DROP
>    iptables -A INPUT -p tcp --dport 137:138 -j DROP
>    iptables -A INPUT -p tcp --dport 139 -j DROP
>    iptables -A INPUT -p tcp --dport 445 -j DROP
>    iptables -A OUTPUT -p udp --dport 137:138 -j DROP
>    iptables -A OUTPUT -p tcp --dport 137:138 -j DROP
>    iptables -A OUTPUT -p tcp --dport 139 -j DROP
>    iptables -A OUTPUT -p tcp --dport 445 -j DROP

> Both scans report all else stealthed.
> Suggestions?

Maybe your ISP already filters those ports?

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/9asbo1196...@mids.svenhartge.de

Reply via email to