From: "Littlefield, tyler" <compgeek13@gmail.com>
To: "Speakup is a screen review system for Linux." <speakup@braille.uwo.ca>
Subject: Re: hacking attempts
Date: Sat, 10 Feb 2007 12:43:13 -0700 [thread overview]
Message-ID: <001b01c74d4b$b874d960$6401a8c0@development> (raw)
In-Reply-To: <20070210172420.GA9298@taylor.homelinux.net>
ohkay, here's my firehol script...
version 5
interface eth0 internet src not "$UNROUTABLE_IPS"
router fwd
server ftp accept
server ssh accept
#server telnet not src 192.168.1.1/24 drop
server smtp accept
server http accept user apache
server pop3 accept
client all accept user "tyler root"
client ftp accept
client ssh accept
client telnet accept
client smtp accept
client pop3 accept
everything is getting dropped... any idea?
Also, I was wondering:
is there a way to do soemthing like client telnet src 192.168.1.1/24 accept,
and then do client telnet drop?
Thanks,
Tyler Littlefield
Unlimited horizons head coder.
check out our website:
tysplace.homelinux.net
msn: compgeek134@hotmail.com
aim: st8amnd2005
skype: st8amnd127
----- Original Message -----
From: Lorenzo Taylor <lorenzo@taylor.homelinux.net>
To: Speakup is a screen review system for Linux. <speakup@braille.uwo.ca>
Sent: Saturday, February 10, 2007 10:24 AM
Subject: Re: hacking attempts
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I particularly like a firewall script called FireHOL. By default it
> blocks everything and you just open what you want. And the scripting
> language that builds the firewall rules is about the easiest to
> understand of anything I've ever seen. It's available at
>
> http://firehol.sourceforge.net, and some distros also have packages
> prebuilt for it. The homepage gives you lots of examples of usage for
> different configurations.
>
> HTH,
> Lorenzo
> - --
> I've always found anomalies to be very relaxing. It's a curse.
> - --Jadzia Dax: Star Trek Deep Space Nine (The Assignment)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.3 (GNU/Linux)
>
> iD8DBQFFzf/EG9IpekrhBfIRAsjQAKCBZ5nORMkpls4pELm6Hf+l3w4QrQCgzLGf
> KP9NfwN9y2FshJybEJI2BQc=
> =6I27
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
next prev parent reply other threads:[~ UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
Littlefield, tyler
` Lorenzo Taylor
` Littlefield, tyler
` Littlefield, tyler [this message]
` Doug Sutherland
` Ralph W. Reid
` Littlefield, tyler
` Ralph W. Reid
` Gregory Nowak
Jude DaShiell
` Doug Sutherland
` Janina Sajka
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='001b01c74d4b$b874d960$6401a8c0@development' \
--to=compgeek13@gmail.com \
--cc=speakup@braille.uwo.ca \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).