Hello.... I would like to know better what my FireWall logs are telling me... Where can i read what PROTO=6 or PROTO=17 mean? Also, I need to put some better rules... I (in theory DENY all packets comming from DEV_WORLD) have some log inputs with PROTO=6 and PROTO=17 comming from that device... on my internal network... i started with 1:65535 on TCP and UDP.... :-D jeje,,, i know i'm kind of crazy but.... in theory.... i will not accept anything from Internet.... just from my internal network.... As you can see... i need to read more... Can someone guide me a bit on what might be happening...??? Thanks... Tomás
Try http://www.little-idiot.com or http://linux-firewall-tools.com/linux/ . I hope that's what you're searching for. Christian Am Mon, 09 Apr 2001 schrieben Sie:
Hello....
I would like to know better what my FireWall logs are telling me... Where can i read what PROTO=6 or PROTO=17 mean? Also, I need to put some better rules... I (in theory DENY all packets comming from DEV_WORLD) have some log inputs with PROTO=6 and PROTO=17 comming from that device... on my internal network... i started with 1:65535 on TCP and UDP.... :-D jeje,,, i know i'm kind of crazy but.... in theory.... i will not accept anything from Internet.... just from my internal network....
As you can see... i need to read more... Can someone guide me a bit on what might be happening...???
Thanks...
Tomás
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com --
Christian Uhde Dreikreuzenstrasse 6 30449 Hannover Germany mail@christian-uhde.de http://www.christian-uhde.de --
-----U
I would like to know better what my FireWall logs are telling me...
read ipchains howto.
Where can i read what PROTO=6 or PROTO=17 mean?
see /etc/protocols 6=tcp 17=udp
Also, I need to put some better rules... I (in theory DENY all packets comming from DEV_WORLD)
you can do that if your firewall is stateful. if you're not using a stateful firewall but just a "simple" packetfilter like ipchains you can't do that. Read and understand ipchains howto. HTH Philipp
participants (3)
-
Christian Uhde
-
mash@myfuckingnet.com
-
Philipp Snizek