Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #5201

Re: Iptables

From Russell Coker <russell@coker.com.au>
Newsgroups linux.debian.security
Subject Re: Iptables
Date 2017-03-31 13:20 +0200
Message-ID <tr2KZ-3Tn-1@gated-at.bofh.it> (permalink)
References <tr2hX-3tv-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Fri, 31 Mar 2017 09:44:01 PM R Calleja wrote:
> can anybody help me. I have security issues and I have to reinstall
> the system every year.
> Set up a firewall with iptables as the attachment and now block
> connections as you can see in the dmesg attachment.

Debian-user is probably a better list for this, or ask for help at your local 
LUG.

As a general rule firewalls don't stop systems being compromised.  A 
desktop/laptop system generally requires a local user to perform so much 
network access that there's nothing that can be usefully blocked.

Also blocking all ICMP isn't going to help you, the "ping of death" bug has 
been fixed.  Buffer overflows are not restricted to ICMP, it's been a problem in 
most protocols in various ways.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

Iptables R Calleja <rcalleja4@gmail.com> - 2017-03-31 12:50 +0200
  Re: Iptables Russell Coker <russell@coker.com.au> - 2017-03-31 13:20 +0200

csiph-web