RE: ever block *outgoing* packets on your firewall?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



And the confusion sets in...  If you are blocking UDP and TCP for things
that shouldn't leave your network then why would that have no effect?

For example, if you want to run a proxy only shop then you might right a
rule that says no port 80 out traffic is allowed except from host x
forcing clients to use the proxy.  Same holds true for socks, etc...

It's very practical and used in many places.  My full time job is
working for a major bank and that's exactly what we do.

Gary Wayne Smith

-----Original Message-----
From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx
[mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of ASHISH
Sent: Sunday, January 16, 2005 8:26 PM
To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: Re: ever block *outgoing* packets on your firewall?

It will have no effect on tcp traffic, but it can be a real mess with
udp traffic.





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux