[oclug] Stealth

[gabriel]

as best i can tell, all that does is limit incoming tcp-type connections to 
your machine. udp and icmp type data isn't affected.  what's more, your 
computer's communication accross a network isn't encrypted or "stealthed" at 
all and can still be looked at by a packet sniffer.  ...not to stealth if you 
ask me.


On October 11, 2002 10:43 am, GR Gaudreau wrote:
> Hi all,
> Someone on alt.os.linux.mandrake sent a post in claiming you can make
> your computer invisible (stealth) to the Internet by issuing this simple
> command as root:
>
> /sbin/iptables -A INPUT -p tcp --syn -j DROP
>
> Is this true and would it be a good thing for me to do, even though I'm
> connected through a router with a built-in firewall?
>
> What does that input line mean, other than the obvious calling of
> iptables?