Security Basics mailing list archives
Re: iptables configuration issue
From: Ansgar Wiechers <bugtraq () planetcobalt net>
Date: Wed, 26 Aug 2009 00:54:18 +0200
On 2009-08-25 J.Bakshi wrote:
I really really need your help to configure iptables to cope with "connection time out problem" Here what actually the situation is. I have configured iptables to drop nmap and other port scanning techniques ( collected from internet, like XMAS scan, FIN scan etc...). If I run nmap against the server ( like nmap -P0 <myserver> or nmap -P0 -sT <myserver> ) then the firewall successfully dropping the scan packets and make the nmap scan to wait for *looooong* . Good. But on the other hand the http and mail server running on the server providing "connection time out error" hence it is not possible to connect the mail /apache and other services running on that server during port scanning against it. Could any one kindly suggest how to cope with this situiation ?
Start with posting your ruleset. Regards Ansgar Wiechers -- "All vulnerabilities deserve a public fear period prior to patches becoming available." --Jason Coombs on Bugtraq ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- iptables configuration issue J.Bakshi (Aug 25)
- Re: iptables configuration issue Ansgar Wiechers (Aug 26)