[oclug]iptables help

GR Gaudreau transop at sympatico.ca
Wed Oct 30 22:09:54 EST 2002


On Wed, 2002-10-30 at 20:06, Tim Forbes wrote:
> It's a good idea to use an online firewall test as one assessment of the safety of your internet connected machine. Here is one that I have used:
> 
> http://scan.sygatetech.com/prequickscan.html
<snip> 

[gr]   I went there and got scanned. Here was part of their report; the
part I thought was wrong:

PORT	SERVICE		STATUS
80	WEB		CLOSED
113	IDENT		CLOSED
8	ICMP		OPEN

I know next to nothing about this firewall stuff, but I get the feeling
something's rotten in Denmark. Those ports should be blocked, right? If
so, then how can I block them? All my other ports are blocked (stealth),
according to them, but the ones above are not.

I'm using Shorewall, provided with MDK 9.0. I'm also connected via a
D-Link router and I'm wondering why this isn't protecting me. It's
supposed to have a built-in firewall. What gives? 


-- 
GR Gaudreau
"Half the lies they told me aren't true!"
~ Yogi Berra




More information about the OCLUG mailing list