XMAS and NMAP scanning.... With default rules dropping all packets

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi people,

I was wondering whether I really need to include these rules if I am
already using a default rule of DROP for INPUT, OUTPUT and FORWARD
chains.

Default rule:-
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

Do I really need these rules? To protect me from these scans..

iptables -I FORWARD -p tcp --tcp-flags ALL ALL -j DROP
iptables -I INPUT -p tcp --tcp-flags ALL ALL -j DROP

#nmap NULL-Packets drop
iptables -I FORWARD -p tcp --tcp-flags ALL NONE -j DROP
iptables -I INPUT -p tcp --tcp-flags ALL NONE -j DROP


Thanks,

Didier
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (MingW32)

iD8DBQE9+vVhH0p2xGbWNGwRAqebAJ9qQqpvAY0wZ50NqiaaW51HyQHLGwCePEAo
NPYRxMYonG0SWe0GzKiNb3M=
=bEjK
-----END PGP SIGNATURE-----




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux