Mailinglist Archive: opensuse-security (556 mails)

< Previous Next >
Re: [suse-security] filtering ports
  • From: "Kurt Seifried" <listuser@xxxxxxxxxxxx>
  • Date: Wed, 26 Sep 2001 15:15:01 -0600
  • Message-id: <003301c146d0$4e06e0a0$6400030a@xxxxxxxxxxxx>
> You can't with ipchains, but with iptables (kernel 2.4.x). Use return-rst.

**DANGEROUS**

If you rely on return-rst to "secure" open ports all I do is firewall them
or ignore them and I can get access to the port in question. Not such a
great idea.

>
> hth
> Markus


Kurt Seifried, kurt@xxxxxxxxxxxx
A15B BEE5 B391 B9AD B0EF
AEB0 AD63 0B4E AD56 E574
http://www.seifried.org/security/




< Previous Next >
Follow Ups
References