Linux Archive

Linux Archive (http://www.linux-archive.org/)
-   Fedora User (http://www.linux-archive.org/fedora-user/)
-   -   how to specify IP not equal to in iptables rules ???? (http://www.linux-archive.org/fedora-user/553673-how-specify-ip-not-equal-iptables-rules.html)

07-18-2011 08:17 AM

how to specify IP not equal to in iptables rules ????
 
*



From: users-bounces@lists.fedoraproject.org
[mailto:users-bounces@lists.fedoraproject.org] On Behalf Of James
Hogarth
Sent: Friday, July 15, 2011 11:41 AM
To: Community
support for Fedora users
Subject: Re: [SOVLED by '!' ]how to specify
IP not equal to in iptables rules ????





>
> '!' Solved my problem
>*


Perhaps
for the people reading the thread on this list....
It is not a good
thing the have the policy of iptables set to "accept", and drop what you
want.
If you ever misses one port, you are as vulnerable as you would have
been without any rules.


Better
approach is:


1)
*to set the policy to drop everything,


2) allow what is
needed,


4) log everything else.


If you find you log gets to bulky, you can introduce
stap 3) to drop traffic from specific port&address before everything else is
logged.


*


In this way, everything that you forgets, will be
logged & dropped, instead of allowed in.


*


hw


*


*

Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten.



This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.


--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


All times are GMT. The time now is 07:12 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.