IPTABLES Help

fyrbrds at aim.com fyrbrds at aim.com
Fri Oct 30 08:18:35 UTC 2009


 Yes, this is what I meant by white lists. This will only stop non-geeks. Using my standard work around, I would get through this on my first try. I often use port 443 because it is never blocked and I don't need it for standard traffic. That's why I said that if you open a connection at all, it is possible to get through there.

 

 

-----Original Message-----
From: Ian Coetzee <ubuntu at iancoetzee.za.net>
Sent: Fri, Oct 30, 2009 8:43 am
Subject: Re: IPTABLES Help










My guess is the best would be to block all ports, then open ONLY the
usefull ports for example:

Hypothetically you have

10.0.0.1 (router)
10.0.0.2 (server/proxy/mail)
10.0.0.3-10 (workstaions)

block 0.0.0.0:0-65535

allow 0.0.0.0:80 from 10.0.0.2
allow 0.0.0.0:25 from 10.0.0.2
allow 0.0.0.0:443 from 10.0.0.2
allow 0.0.0.0:110 from 10.0.0.2

how you set up the rules depends on the router you have.

HTH
Ian

On Fri, Oct 30, 2009 at 9:16 AM, shali Kallumpuram
<vidyaserveradmin at gmail.com> wrote:
> Dear all,
>
> i need help in blocking bittorent files downloading through proxi, we are
> using squid proxi,  any help??/
>
>
> Shali K R
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
>
>

-- 
ubuntu-users mailing list
ubuntu-users at lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users



 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20091030/1aab70f3/attachment.html>


More information about the ubuntu-users mailing list