Ipchains Woes

Kezdőlap
Csatolmányok:
Üzenet email-ben
+ (text/plain)
Üzenet törlése
Válasz az üzenetre
Szerző: David A. Sinck
Dátum:  
Tárgy: Ipchains Woes

\_ SMTP quoth Craig White on 2/25/2002 18:19 as having spake thusly:
\_
\_ On Mon, 2002-02-25 at 14:45, David A. Sinck wrote:
\_ >
\_ > [...]
\_ > You may need to to -j ACCEPT in masquerade chain for trusted devices?
\_ >
\_ ----
\_ wow - 2 messages in 1 day David.

oh hush.

\_ as default policy - ACCEPT is a really poor idea for ipchains - for
\_ testing purposes, OK - but it will ultimately have to be changed to
\_ REJECT or DENY to have some security and piece of mind...be it forward,
\_ input or output.

It's also not all that keen for iptables. Having futzed with both
ipchains and iptables, I much prefer iptables.

A potentially informative iptables link for masquerading:

http://www.linuxdoc.org/HOWTO/Masquerading-Simple-HOWTO/summary.html

David