Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #167043

Re: Firewall - basic config?

From Joe <joe@jretrading.com>
Newsgroups linux.debian.user
Subject Re: Firewall - basic config?
Date 2016-04-23 22:00 +0200
Message-ID <rrbSG-ev-9@gated-at.bofh.it> (permalink)
References <rr9ea-6Ge-9@gated-at.bofh.it>
Organization JRE Trading Ltd

Show all headers | View raw


On Sat, 23 Apr 2016 13:04:36 -0400
Harris Paltrowitz <harrisupstate@yahoo.com> wrote:


>   I noticed a mention of "microsoft-ds" in 
> there...  I assume this is just a protocol, and not a piece of 
> software!  

Yes, iptables is being helpful in giving you a common name for the port
or protocol used. It picks the name out of /etc/services, which is a
useful file to know about. There is also an /etc/protocols, which is a
list of actual IP protocols, but this is not as generally useful, tcp,
udp and icmp are the commonly-used ones. Many VPNs use other IP
protocols to carry the encrypted traffic.

Reco suggests using iptables -nvL which will give numeric IP addresses
and CIDR ranges, and avoid looking up either service names or DNS.

You might also try iptables -S which will list the rules in the form
that you would enter by hand as arguments to the iptables command. It is
a different view, and you may see things that are less obvious in the
-L view.

Remember that IPv6 is alive and well in quite a lot of hardware these
days, and there is an ip6tables to deal with it.

-- 
Joe

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Firewall - basic config? Harris Paltrowitz <harrisupstate@yahoo.com> - 2016-04-23 19:10 +0200
  Re: Firewall - basic config? Reco <recoverym4n@gmail.com> - 2016-04-23 20:10 +0200
    Re: Firewall - basic config? Michael Milliman <michael.e.milliman@gmail.com> - 2016-04-24 07:20 +0200
      Re: Firewall - basic config? Reco <recoverym4n@gmail.com> - 2016-04-24 11:00 +0200
        Re: Firewall - basic config? Michael Milliman <michael.e.milliman@gmail.com> - 2016-04-26 04:10 +0200
  Re: Firewall - basic config? Joe <joe@jretrading.com> - 2016-04-23 22:00 +0200
    Re: Firewall - basic config? shawn wilson <ag4ve.us@gmail.com> - 2016-04-25 15:50 +0200
  Re: Firewall - basic config? cbannister@slingshot.co.nz - 2016-04-27 10:40 +0200
  Re: Firewall - basic config? Jonathan Dowland <jmtd@debian.org> - 2016-04-27 11:30 +0200
    Re: Firewall - basic config? Harris Paltrowitz <harrisupstate@yahoo.com> - 2016-04-27 13:50 +0200

csiph-web