Re: [arch-dev-public] dropping tcp_wrapper support

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Am 16.07.2011 19:41, schrieb Andrea Scarpino:
> On 16 July 2011 19:32, Vic Demuzere <vic@xxxxxxxxxxx> wrote:
>> So, you're saying that those 4 lines are easier than the 2 short ones
>> in hosts.allow? Ah well, I'll have to learn to write iptables scripts
>> then, I suppose.
> I mean its more intuitive in that way, you've more power on what is
> accepted and what isn't.; e.g. you can apply filters only to one
> interface.
> 
> Why you should write an iptables script?
> 
> BTW, sorry "-A INPUT -j REJECT" blocks everything then have to be at
> the last line, and not at first!

You shouldn't do it like this. Look at
/etc/iptables/simple_firewall.rules for a simple and non-broken template.

Attachment: signature.asc
Description: OpenPGP digital signature


[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]
  Powered by Linux