Try /sbin/iptables -A INPUT -p tcp --dport 68 -j DROP a good tutorial and sample script are here and there are a couple of other firewalls available such as Guarddog and Bastille-Linux in Debian.Originally Posted by /Knoppix/Knewbie/
hi just got knoppix, and need a little help getting my firewall in to stealth mode on www.grc.com
{its fine at sygate sos}
but at gibson it shows port 68 is open and port 67 is closed and all the other ports are in stealth mode..
i installed firestarter which didn't seem to do much so i then used this line
/sbin/iptables -A INPUT -p tcp --syn -j DROP
which put all but two ports in to stealth mode
any advice on how to stealth these 2 ports ??
cheers
/Knoppix/Knewbie/
Try /sbin/iptables -A INPUT -p tcp --dport 68 -j DROP a good tutorial and sample script are here and there are a couple of other firewalls available such as Guarddog and Bastille-Linux in Debian.Originally Posted by /Knoppix/Knewbie/
--Also try ' nmap localhost ' and ' less /etc/services ' to see which programs run on those ports. You can also use ' lsof |grep 68 ' to list open files/ports.
--I'm concerned if you disable port 68 (bootpc) your DHCP server will stop working, but I don't know that much about DHCP or firewalling.
(COMPLETE IPTABLES NEWBIE QUESTION) - After skimming thru the iptables tutorial and understanding about 2% of it, what about limiting your DROP rule to interface ppp0?
Originally Posted by Stephen
i have tried going to the sites you reccommend but they seem not to be functioning/
o well cheers for the advice anyway
woody
Here is the Guarddog and Bastille-Linux web sites I just checked them and they both work from my machine another place you can try is Arno's Iptables which is what I use it's fairly easy to setup you only have to edit a couple of lines in the script(s) and change some permissions on the files and you are ready to use it.Originally Posted by /Knoppix/Knewbie/
Most firewalls that I have seen do that when you are setting up the rules you have your external (internet) connection which is what you would be dropping the incoming packets on you can still establish outgoing connections to get what you require from the external interface unless you go out of your way to block outgoing connections on the ports. If you have an internal interface that you are using NAT on to share the connection it is usually on a trusted internal interface so you can have access to your internal network. This is what I do with my firewall machine from the outside my computer does not exist on the internet if you scan it but on the internal side my firewall machine runs only SSH so I can get to it to check for upgrades to my Woody (actually Mini-Woody now known as Bonzai Linux) install on it and HTTP so I can serve myself some web pages that I have.Originally Posted by Dave_Bechtel
Lenovo Thinkpad T470 i7 2.8GHz 8GB RAM 128GB SSD W10 Pro Touch Bios Lock READ
$90.00
Lenovo ThinkPad T460s 14" Intel i5 8GB RAM 120GB SSD WiFi HDMI USB Win 10 Laptop
$119.99
Lenovo ThinkPad T15 15.6" i5-10210U 1.6GHz 16GB 256GB SSD W10 Pro
$250.00
Lenovo ThinkPad X1 Carbon 6th gen Ultrabook i7 8650U 16GB RAM 512GB SSD Win11P
$239.95
Lenovo ThinkPad X13 Gen 4 13.3 512GB SSD i7 13th Gen4 WNTY
$499.99
Lenovo IdeaPad Slim 5 16ABR8 16" Touch AMD Ryzen 7 7730U 16GB 1TB SSD W11H
$449.99
15.6" Touch Lenovo Flex 5 Intel Core i7-8550U 16GB DDR4 512GB SSD GeForce MX 130
$225.00
Lenovo ThinkPad T480 14" Laptop Intel Core i5 8GB RAM 128GB SSD Win11 - C-GRADE
$99.99
Lenovo ThinkPad Yoga 11E 4TH Gen Core i5-7200 2.50GHz 8GB RAM 256 GB SATA SSD
$79.99
Lenovo Yoga 6 Laptop, 13.3" IPS 60Hz, Ryzen 5 7530U, 8GB, 512GB, Win 11 Home
$449.99