IP Chains

jens@pinguin.conetix.de
Wed, 14 Oct 1998 19:00:05 +0200


Hi,

if this is OT here, please point me somewhere else!

I've been trying to set up a port-wise block via ipchains for at least an
hour now, but don't seem to get anywhere ...

I want to keep samba and all our Win95 clients from broadcasting out over my
ippp0 device (which is configured as dial-on-demand). So I did this:

ipchains -A forward -j REJECT -p udp -s 192.168.1.0/255.255.255.0 \
137:139 -i ippp0 -v

resulting in this:

REJECT udp opt ------ tos 0xFF 0x00 via ippp0
192.168.1.0/24 -> 0.0.0.0/0 137:139 -> *

the same for "-p tcp".

But an "ipchains -L" now always triggers a connection??! What for? I have
all local IP adresses in /etc/hosts ...

-- 
_ciao, Jens_______________________________http://www.pinguin.conetix.de_
    cat /dev/boiler/water | tea | sieve > /cup
    mount -t hdev /dev/human/mouth01 /mouth ; cat /cup >/mouth/gulp

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/