Mailinglist Archive: opensuse-security (685 mails)

< Previous Next >
Re: [suse-security] Drop of Broadcasts

>> and there stands
>>
>> BROADCAST="x.x.x.255" (where the x.x.x is to fill up with your network or
>> with 0) iptables -A INPUT -i $IFACE -d $BROADCAST -j DROP
>>
>I think you should write
>
>iptables -A OUTPUT -o $IFACE -d $BROADCAST -j DROP
>

Think it depends on the point of view. If you wont to answer to incoming broadcast my
way seems right. if you wanto 2 prevent outgoing broadcasts from your network your
suggestion should be ok.

The truth is out there.

Michael



< Previous Next >
References