[CentOS] Re: iptables question

on 8-27-2008 4:27 PM Joseph L. Casale spake the following: http://iptables.rlworkman.net/chunkyhtml/index.html Nice doc, any ideas on how to print it (or many chapters easily) so I can haul with me on my plane ride this weekend? Thanks! jlc Or here is a link to a non chunk version http://ipt

[CentOS] Re: iptables question

on 8-27-2008 4:27 PM Joseph L. Casale spake the following: http://iptables.rlworkman.net/chunkyhtml/index.html Nice doc, any ideas on how to print it (or many chapters easily) so I can haul with me on my plane ride this weekend? Thanks! jlc E-mail me offlist and I can get make a pdf if you wa

[CentOS] Re: Iptables not blocking UDP port 53

Sean Carolan wrote: Does the count field from "iptables -vnL RH-Firewall-1-INPUT" show your REJECT rules being hit? Yes, the rule gets hit and it returns an answer to the DNS query anyway. I saw it increment from 10 to 11 when I ran the query: 11 692 REJECT udp -- * * 10.10

Re: [CentOS] Re: Iptables not blocking UDP port 53

> Are you running tcpdump on the same machine that is doing the filtering? > You do realize that tcpdump sees the packets as they come from the > interface and before they are passed to the filter rules, right? I had forgotten this important piece of information. Thank you for pointing this out.

[CentOS] Re: Iptables not blocking UDP port 53

Sean Carolan wrote: I'm attempting to block access to port 53 from internet hosts for an internal server. This device is behind a gateway router so all traffic appears to come from source ip 10.100.1.1. Here are my (non-working) iptables rules: -A RH-Firewall-1-INPUT -s 10.100.1.1 -m tcp -p tc

[CentOS] Re: iptables

on 1/4/2008 1:37 AM Christopher Thorjussen spake the following: Indunil Jayasooriya wrote: Hi All, I am running iptables on centos 4.5 and 5 boxes. Now , I have requirements to enable below features. Gateway level antivirus, anti spyware and intrusion preventions, content filtering, etc. The