topic Re: Dear U.SivaKumar , whether you command for ipchains means forward everything? in Operating System - Linux

Dear U.SivaKumar , whether you command for ipchains means forward everything?

frederick van targero — Mon, 17 Jun 2002 07:04:39 GMT

#ipchains -A input -i eth1 -p udp -s 0/0 53 -d 0/0 1024:65535 -j ACCEPT

seems it forward everything.
i think, may be i can only forward the dns,
right yet i can ping the dns server as well as the server has been set well in client, so, i only need the port of dns?

am i right?

regards,
frederick

Re: Dear U.SivaKumar , whether you command for ipchains means forward everything?

U.SivaKumar_2 — Mon, 17 Jun 2002 08:39:47 GMT

Hi,
I think you have added only one ipchains in the
system. For blocking ping packets put these commands
# rule to block incoming ICMP echo requests

ipchains -A input -i eth0 -p icmp -s 0.0.0.0/0 -d 0.0.0.0/0 8 -l -j DENY

# rule to block outgoing ICMP echo replies

ipchains -A output -i eth0 -p icmp -s 0.0.0.0/0 0 -d 0.0.0.0/0 -l -j DENY

regards,
U.SivaKumar