Re: Ipchains

2003-01-29 Thread Jack Bowling
** Reply to message from Brian York <[EMAIL PROTECTED]> on Wed, 29 Jan 2003 10:40:09 -0500 > > > when i use iptable the --dport argument doesn't work would anyone know why? Brian - Weird results in iptables rules usually happen when people forget to put the protocol switch in. So make sure you

Re: Ipchains

2003-01-29 Thread Michael Schwendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 29 Jan 2003 10:40:09 -0500, Brian York wrote: > when i use iptable the --dport argument doesn't work would anyone know > why? Usually due to a syntax error on your side. Consult the manual. - -- -BEGIN PGP SIGNATURE- Version: GnuPG

Re: Ipchains

2003-01-29 Thread Brian York
zeist wrote: On Fri, 17 Jan 2003, Vasyl Kenyuk wrote: Hi! I'm using RedHat 7.3, and I would to allow only www input/output traffic (no ftp, telnet, ssh, etc.). There are no reason to do that, but I wonna learn more about firewalls. So I got the answer, I must make # Default Policy I/O DROP

Re: Ipchains

2003-01-21 Thread zeist
On Fri, 17 Jan 2003, Vasyl Kenyuk wrote: > Hi! > I'm using RedHat 7.3, and I would to allow only www input/output traffic > (no ftp, telnet, ssh, etc.). There are no reason to do that, but I wonna > learn more about firewalls. So I got the answer, I must make > > # Default Policy I/O DROP > > i

Re: Ipchains

2003-01-17 Thread jdow
First idea is kill ipchains if you want ftp to work. Go to iptables and do NOT look back. Ipchains is an emulation using IPTables, poorly, under the 2.4 kernels. You can't load the modules you need to proeprly use ftp. {^_^} - Original Message - From: "Vasyl Kenyuk" <[EMAIL PROTECTED]> >

Re: Ipchains

2003-01-17 Thread Jay Turner
On Fri, Jan 17, 2003 at 05:30:56PM +0100, Vasyl Kenyuk wrote: > # Default Policy I/O DROP > >ipchains -P INPUT DENY > >ipchains -P OUTPUT DENY > > > ># Rules > >ipchains -A INPUT -i eth0 -p tcp -d my_ip --dport 80 -j ACCEPT > >ipchains -A OUTPUT -i eth0 -p tcp -d my_ip --dport 80 -j ACCEPT The las

RE: Ipchains

2003-01-17 Thread Lucas Albers
Vasyl, That particular question belongs on the Valhalla-list which is for Redhat 7.3. I'm sure many of your questions could be answered in the Linux HOWTO documents. Take your time in learning about Linux, reading the background documentation on how the underlying system works. h

Re: Ipchains

2003-01-15 Thread jdow
I still prefer "rpm -e ipchains". Luke. I suppose stopping it first would be a Martha Stewart thing. {^_-} - Original Message - From: "Lucas Albers" <[EMAIL PROTECTED]> > Iptables is the default for Redhat 8.0 > Ipchains is default for 7.3 > > #clear all rules > iptables -F > service ip

RE: Ipchains

2003-01-15 Thread Lucas Albers
Iptables is the default for Redhat 8.0 Ipchains is default for 7.3 #clear all rules iptables -F service iptables save or: service iptables stop service iptables save for ipchains: ipchains -F service ipchains stop > --Luke > --Computer Science Sysadmin, MSU Bozeman > --admin(AT)cs.montana.edu

Re: Ipchains

2003-01-15 Thread Pablo Allietti
You can test this ipchains -F Flush all rules. if is redhat /etc/init.d/ipchains stop On Wed, Jan 15, 2003 at 09:30:53PM +0100, vasyl wrote: > Delivered-To: [EMAIL PROTECTED] > Delivered-To: [EMAIL PROTECTED] > From: vasyl <[EMAIL PROTECTED]> > User-Agent: Mozilla/5.0 (X11; U; Linux i686

Re: Ipchains

2003-01-15 Thread Pablo Allietti
Again ipchains -F forward flush all forwarding rules ipchains -F output flush all output rules ipchains -F inputflush all input rules i found this in Internet/. On Wed, Jan 15, 2003 at 09:30:53PM +0100, vasyl wrote: > Delivered-To: [EMAIL PROTECTED] > Delivered-To: [EMAIL PROTECTE

Re: ipchains / iptables

2002-11-09 Thread psyche
On Wed, 6 Nov 2002, Jesse Keating wrote: > On Wed, 6 Nov 2002 17:02:41 -0800 > Stephen Mah <[EMAIL PROTECTED]> wrote: > > # > # I noticed ipchains was used for Valhalla and iptables is now used on > # 8.0. What's the difference between the two? Is the default "medium" > # iptable setting good en

Re: ipchains / iptables

2002-11-06 Thread Kevin McConnell
--- Stephen Mah <[EMAIL PROTECTED]> wrote: > I noticed ipchains was used for Valhalla and > iptables is now used on 8.0. What's the difference > between the two? Is the default "medium" iptable > setting good enough to protect me when using a VPN > client? That's a pretty loaded question, but I'll

Re: ipchains / iptables

2002-11-06 Thread Jesse Keating
On Wed, 6 Nov 2002 17:02:41 -0800 Stephen Mah <[EMAIL PROTECTED]> wrote: # # I noticed ipchains was used for Valhalla and iptables is now used on # 8.0. What's the difference between the two? Is the default "medium" # iptable setting good enough to protect me when using a VPN client? Ipchains wa

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Tony Nugent
On Tue Oct 29 2002 at 15:24, "jdow" wrote: > From: <[EMAIL PROTECTED]> > > =>now that i think about it, doesn't "service iptables start" > > =>automatically load ip_tables anyway? Yes, but... > > I'd be careful here. If you load iptables then that's all you get. You > > really want to explicitl

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Tony Nugent
On Tue Oct 29 2002 at 15:15, "jdow" wrote: > From: "Michael Schwendt" <[EMAIL PROTECTED]> > > > > and which iptables modules load so I can finally do > > > "service iptables start". > > > > It will load ip_tables and a few others automatically. > > Unfortunately, once iptables is running it does

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Robert L. Cochran
ailto:Robert.L.Cochran@;irs.gov>> To: <[EMAIL PROTECTED] <mailto:psyche-list@;redhat.com>> Sent: Tuesday, October 29, 2002 13:47 PM Subject: RE: IPCHAINS modules to unload and IPTABLES modules to load. Robert Ziegler's book Linux Firewalls Second Edition is really great. It

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread jdow
chran Robert L (NO)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, October 29, 2002 13:47 PM Subject: RE: IPCHAINS modules to unload and IPTABLES modules to load. Robert Ziegler's book Linux Firewalls Second Edition is really great. Itdoes contain typos and you shou

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread jdow
From: <[EMAIL PROTECTED]> > On Tue, 29 Oct 2002, Robert P. J. Day wrote: > > =>On Tue, 29 Oct 2002, Taylor, ForrestX wrote: > => > =>> Robert P. J. Day wrote: > =>> > as part of a tutorial i'm writing on iptables, here's what i've listed -- > =>> > feedback is appreciated. > =>> > > =>> > to switch

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread jdow
From: "Robert P. J. Day" <[EMAIL PROTECTED]> > # chkconfig --level 0123456 ipchains off (turn off auto start) > # service ipchains stop (stop ipchains) > # rmmod ipchains (unload the module) > # rpm -e ipchains (if you're SURE :-) > > # insmod ip_tables (insmod or modprobe?) > # chkcon

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread jdow
From: "Michael Schwendt" <[EMAIL PROTECTED]> > > and which iptables modules load so I can finally do > > "service iptables start". > > It will load ip_tables and a few others automatically. Unfortunately, once iptables is running it doesn't stop as easily as ipchains. {^_-}

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread jdow
service ipchains stop# Stop IPChains that may be running now. service iptables on # Start IPTables now. chkconfig ipchains off # Stop IPChains from running on boot up. chkconfig iptables on# Start IPTables on boot up. That should be all there is to it. If you want more information

RE: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Cochran Robert L (NO)
Title: RE: IPCHAINS modules to unload and IPTABLES modules to load. Robert Ziegler's book Linux Firewalls Second Edition is really great. It does contain typos and you should probably check your code against the code posted to his web site. You will have to adapt the code to your ne

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Robert P. J. Day
On Tue, 29 Oct 2002, Jack Bowling wrote: > On Tue, Oct 29, 2002 at 12:30:21PM -0500, Robert P. J. Day wrote: > > > > to switch from ipchains to iptables: > > > > # chkconfig --level 0123456 ipchains off (turn off auto start) > > # service ipchains stop (stop ipchains) > >

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Jack Bowling
On Tue, Oct 29, 2002 at 12:30:21PM -0500, Robert P. J. Day wrote: > On 29 Oct 2002, Alejandro González Hernández - Imoq wrote: > > > Hello. > > > > I would like to unload ipchains and load iptables. I can run "setup", > > then unselect "ipchains" and select "iptables" and when I reboot, I get > >

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Alejandro González Hernández - Imoq
On Tue, 2002-10-29 at 11:52, Taylor, ForrestX wrote: > I would say that you should use `modprobe -r` instead of rmmod, and > modprobe instead of insmod. `modprobe` will include any module > dependencies, thus it is a good habit to get into ;o) Thank you to everybody who answered; service ipch

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread steveo
On Tue, 29 Oct 2002, Robert P. J. Day wrote: =>On Tue, 29 Oct 2002, Taylor, ForrestX wrote: => =>> Robert P. J. Day wrote: =>> > as part of a tutorial i'm writing on iptables, here's what i've listed -- =>> > feedback is appreciated. =>> > =>> > to switch from ipchains to iptables: =>> > =>> >

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Robert P. J. Day
On Tue, 29 Oct 2002, Taylor, ForrestX wrote: > Robert P. J. Day wrote: > > as part of a tutorial i'm writing on iptables, here's what i've listed -- > > feedback is appreciated. > > > > to switch from ipchains to iptables: > > > > # chkconfig --level 0123456 ipchains off (turn off auto start)

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Taylor, ForrestX
Robert P. J. Day wrote: as part of a tutorial i'm writing on iptables, here's what i've listed -- feedback is appreciated. to switch from ipchains to iptables: # chkconfig --level 0123456 ipchains off (turn off auto start) # service ipchains stop (stop ipchains) # rmmod ipchains(unlo

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Robert P. J. Day
On 29 Oct 2002, Alejandro González Hernández - Imoq wrote: > Hello. > > I would like to unload ipchains and load iptables. I can run "setup", > then unselect "ipchains" and select "iptables" and when I reboot, I get > iptables working. What I need right now is to unload ipchains and load > iptabl

Re: IPCHAINS modules to unload and IPTABLES modules to load.

2002-10-29 Thread Michael Schwendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 29 Oct 2002 11:16:19 -0600, Alejandro González Hernández - Imoq wrote: > I would like to unload ipchains and load iptables. I can run "setup", > then unselect "ipchains" and select "iptables" and when I reboot, I > get iptables working. What I need