Re: Forcing an RST

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi James,

On Mon, Feb 20, 2006 at 12:45:20PM -0500, James Strickland told us:
> Hi. Is there a way so that when a packet reaches the filter table input
> chain with the Syn flag set, that i send out a response with RST?
> 
> ie: connections to my wan interface with Syn set (trying to establish) on
> port 80 get a RST response to the sender?

iptables -A INPUT -i <your wan device> -p tcp --dport 80 \
         -j REJECT --reject-with tcp-reset

But this should be not too hard to find in any of the iptables
tutorials out there ;-), e.g.

http://iptables-tutorial.frozentux.net/iptables-tutorial.html


have a nice day ;-)

Sven

-- 
Linux zion.homelinux.com 2.6.16-rc3-mm1_27 #27 Wed Feb 15 17:51:36 CET 2006 i686 athlon i386 GNU/Linux
 19:00:44 up 2 days, 23:16,  1 user,  load average: 0.07, 0.14, 0.18

Attachment: pgpoS7TqCwpSM.pgp
Description: PGP signature


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux