Mailinglist Archive: opensuse-security (448 mails)
| < Previous | Next > |
Re: [suse-security] SuSEfirewall2 and nimda
- From: Lentila de Vultur <ledeve@xxxxxxx>
- Date: Mon, 6 May 2002 14:37:19 +0200 (MEST)
- Message-id: <13595.1020688639@xxxxxxxxxxxxx>
> >iptables -A block -p tcp --dport http -m state --state
> NEW,ESTABLISHED,RELATED \
> -m string --string "root.exe" -j DROP<
>
> i'm curious .. does this drop the packet only or all further packets
> (which
> might come in) too?
afaik it drops only the packets that contain the string "root.exe"
--
Lentila de Vultur
CDTT & CGA
"Daca mai multe persoane imi spun ca sunt
beat ma duc sa-mi curatz ochelarii."
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net
> NEW,ESTABLISHED,RELATED \
> -m string --string "root.exe" -j DROP<
>
> i'm curious .. does this drop the packet only or all further packets
> (which
> might come in) too?
afaik it drops only the packets that contain the string "root.exe"
--
Lentila de Vultur
CDTT & CGA
"Daca mai multe persoane imi spun ca sunt
beat ma duc sa-mi curatz ochelarii."
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net
| < Previous | Next > |