Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #167043
| From | Joe <joe@jretrading.com> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Firewall - basic config? |
| Date | 2016-04-23 22:00 +0200 |
| Message-ID | <rrbSG-ev-9@gated-at.bofh.it> (permalink) |
| References | <rr9ea-6Ge-9@gated-at.bofh.it> |
| Organization | JRE Trading Ltd |
On Sat, 23 Apr 2016 13:04:36 -0400 Harris Paltrowitz <harrisupstate@yahoo.com> wrote: > I noticed a mention of "microsoft-ds" in > there... I assume this is just a protocol, and not a piece of > software! Yes, iptables is being helpful in giving you a common name for the port or protocol used. It picks the name out of /etc/services, which is a useful file to know about. There is also an /etc/protocols, which is a list of actual IP protocols, but this is not as generally useful, tcp, udp and icmp are the commonly-used ones. Many VPNs use other IP protocols to carry the encrypted traffic. Reco suggests using iptables -nvL which will give numeric IP addresses and CIDR ranges, and avoid looking up either service names or DNS. You might also try iptables -S which will list the rules in the form that you would enter by hand as arguments to the iptables command. It is a different view, and you may see things that are less obvious in the -L view. Remember that IPv6 is alive and well in quite a lot of hardware these days, and there is an ip6tables to deal with it. -- Joe
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Firewall - basic config? Harris Paltrowitz <harrisupstate@yahoo.com> - 2016-04-23 19:10 +0200
Re: Firewall - basic config? Reco <recoverym4n@gmail.com> - 2016-04-23 20:10 +0200
Re: Firewall - basic config? Michael Milliman <michael.e.milliman@gmail.com> - 2016-04-24 07:20 +0200
Re: Firewall - basic config? Reco <recoverym4n@gmail.com> - 2016-04-24 11:00 +0200
Re: Firewall - basic config? Michael Milliman <michael.e.milliman@gmail.com> - 2016-04-26 04:10 +0200
Re: Firewall - basic config? Joe <joe@jretrading.com> - 2016-04-23 22:00 +0200
Re: Firewall - basic config? shawn wilson <ag4ve.us@gmail.com> - 2016-04-25 15:50 +0200
Re: Firewall - basic config? cbannister@slingshot.co.nz - 2016-04-27 10:40 +0200
Re: Firewall - basic config? Jonathan Dowland <jmtd@debian.org> - 2016-04-27 11:30 +0200
Re: Firewall - basic config? Harris Paltrowitz <harrisupstate@yahoo.com> - 2016-04-27 13:50 +0200
csiph-web