Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.security > #475

Re: Why does nmap appear to be slower vs. reject rules than drop rules?

From Andrew <andrew@invalid.invalid>
Newsgroups comp.os.linux.security
Subject Re: Why does nmap appear to be slower vs. reject rules than drop rules?
Date 2014-04-05 16:31 +0000
Organization A noiseless patient Spider
Message-ID <lhpb4p$b52$2@dont-email.me> (permalink)
References <lhpake$b54$1@dont-email.me>

Show all headers | View raw


I'm not sure what my newsreader did that stripped the line breaks between 
the rules, but this should be fixed...

> # Generated by iptables-save v1.4.14 on Sat Apr  5 16:09:28 2014
> *filter
> :INPUT DROP [0:0]
> :FORWARD DROP [0:0]
> :OUTPUT ACCEPT [668:57464]
> -A INPUT -p icmp -j ACCEPT
> -A INPUT -i lo -j ACCEPT 
> -A INPUT -p tcp -m multiport --dports 22,80,443 -j ACCEPT 
> -A INPUT -j REJECT --reject-with icmp-port-unreachable
> COMMIT
> # Completed on Sat Apr  5 16:09:28 2014

-- 
Andrew

IT is a filter. It accepts masochists on stdin and emits misanthropes on
stdout.

Back to comp.os.linux.security | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Why does nmap appear to be slower vs. reject rules than drop rules? Andrew <andrew@invalid.invalid> - 2014-04-05 16:22 +0000
  Re: Why does nmap appear to be slower vs. reject rules than drop rules? Andrew <andrew@invalid.invalid> - 2014-04-05 16:31 +0000
  Re: Why does nmap appear to be slower vs. reject rules than drop rules? Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2014-04-05 23:47 +0000
    Re: Why does nmap appear to be slower vs. reject rules than drop rules? Richard Kettlewell <rjk@greenend.org.uk> - 2014-04-06 10:20 +0100

csiph-web