Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5200 > unrolled thread

Iptables

Back to article view | Back to linux.debian.security

Contents

  Iptables R Calleja <rcalleja4@gmail.com> - 2017-03-31 12:50 +0200
    Re: Iptables Russell Coker <russell@coker.com.au> - 2017-03-31 13:20 +0200

#5200 — Iptables

[Multipart message — attachments visible in raw view] — view raw

Good morning,
can anybody help me. I have security issues and I have to reinstall
the system every year.
Set up a firewall with iptables as the attachment and now block
connections as you can see in the dmesg attachment.

Thank you very much, Roberto

[toc] | [next] | [standalone]

#5201

On Fri, 31 Mar 2017 09:44:01 PM R Calleja wrote:
> can anybody help me. I have security issues and I have to reinstall
> the system every year.
> Set up a firewall with iptables as the attachment and now block
> connections as you can see in the dmesg attachment.

Debian-user is probably a better list for this, or ask for help at your local 
LUG.

As a general rule firewalls don't stop systems being compromised.  A 
desktop/laptop system generally requires a local user to perform so much 
network access that there's nothing that can be usefully blocked.

Also blocking all ICMP isn't going to help you, the "ping of death" bug has 
been fixed.  Buffer overflows are not restricted to ICMP, it's been a problem in 
most protocols in various ways.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.security

csiph-web