--------------ms8C85877FAA2FE8D1FA186FB1
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Vladimir Ivaschenko wrote:
(snip)
> disable ALL incoming connection higher than 1024 (i.e. drop the packets
> with SYN set/ACK cleared) and only allow passive ftp. Considering that
> the patch adds rules directly through the kernel, I could lock the
> ipchains rules themselves with a module from LIDS so they could not be
Just to you don't forget: ipchains will be "dead" in 2.4. Now is
netfilter's time. Even if you use this as a module, think in a
netfilter's mod. It will have more life time.
> Thanks for the replies,
> Vladimir
-- Alexandre Hautequest - Linux User #116289 "When I'm on the road, I'm indestructible. No one can stop me. But they try..."O .br que não para de crescer: http://stats.distributed.net/rc5-64/psearch.php3?st=.br --------------ms8C85877FAA2FE8D1FA186FB1 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature
MIIKcAYJKoZIhvcNAQcCoIIKYTCCCl0CAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC CCcwggTxMIIEWqADAgECAhBGp6zM8e+7zhi5hjSnOmbYMA0GCSqGSIb3DQEBBAUAMIHMMRcw FQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29y azFGMEQGA1UECxM9d3d3LnZlcmlzaWduLmNvbS9yZXBvc2l0b3J5L1JQQSBJbmNvcnAuIEJ5 IFJlZi4sTElBQi5MVEQoYyk5ODFIMEYGA1UEAxM/VmVyaVNpZ24gQ2xhc3MgMSBDQSBJbmRp dmlkdWFsIFN1YnNjcmliZXItUGVyc29uYSBOb3QgVmFsaWRhdGVkMB4XDTk5MTAyNjAwMDAw MFoXDTk5MTIyNTIzNTk1OVowggEMMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UE CxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazFGMEQGA1UECxM9d3d3LnZlcmlzaWduLmNvbS9y ZXBvc2l0b3J5L1JQQSBJbmNvcnAuIGJ5IFJlZi4sTElBQi5MVEQoYyk5ODEeMBwGA1UECxMV UGVyc29uYSBOb3QgVmFsaWRhdGVkMSYwJAYDVQQLEx1EaWdpdGFsIElEIENsYXNzIDEgLSBO ZXRzY2FwZTEdMBsGA1UEAxQUQWxleGFuZHJlIEhhdXRlcXVlc3QxITAfBgkqhkiG9w0BCQEW EmhxdWVzdEBpc3RtLmNvbS5icjCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAmL0Ls0nt oLF5vsQOuHBqsK53AuktM0G+aUxPQYCzhILqBO6RxFcOXhyu2QncEJXP2m+8audVT9zjSsR9 AwiQ+VSlcdQUurjHdss/xN0A86GeUB+4rrPYTHIipbDiAtnRqGrUHgKkcXnu7XLx1c03vgKK peR3+uYC3mIQqp82bFkCAwEAAaOCAY8wggGLMAkGA1UdEwQCMAAwgawGA1UdIASBpDCBoTCB ngYLYIZIAYb4RQEHAQEwgY4wKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNv bS9DUFMwYgYIKwYBBQUHAgIwVjAVFg5WZXJpU2lnbiwgSW5jLjADAgEBGj1WZXJpU2lnbidz IENQUyBpbmNvcnAuIGJ5IHJlZmVyZW5jZSBsaWFiLiBsdGQuIChjKTk3IFZlcmlTaWduMBEG CWCGSAGG+EIBAQQEAwIHgDCBhgYKYIZIAYb4RQEGAwR4FnZkNDY1MmJkNjNmMjA0NzAyOTI5 ODc2M2M5ZDJmMjc1MDY5YzczNTliZWQxYjA1OWRhNzViYzRiYzk3MDE3NDdkYTVjNGYzMTQx YmVhYzMzYmRjZmM4MTE2YjA2YmY3ZDcxMTQ4OWNhMWJhNDVmYWYzZWE0NTBjMDMGA1UdHwQs MCowKKAmoCSGImh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL2NsYXNzMS5jcmwwDQYJKoZIhvcN AQEEBQADgYEAMxLItKpMboaofQL/LIZVzEYmljW3IhE3oZ5sdvPcieuHUstkXW3LUrqovNF5 9/rCPZ3bQFwiZo/mP5HdKGVOSf8rIdMxcgVhTQFTU+YoM6k1ECwYqOhASmxNtuvOVkZw/aFc Pk6qB8C6eP3CSyUV6AbR6lk3oPepAn9XkgsijkQwggMuMIICl6ADAgECAhEA0nYujRQMPX2y qCVdr+4NdTANBgkqhkiG9w0BAQIFADBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNp Z24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDEgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlv biBBdXRob3JpdHkwHhcNOTgwNTEyMDAwMDAwWhcNMDgwNTEyMjM1OTU5WjCBzDEXMBUGA1UE ChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxRjBE BgNVBAsTPXd3dy52ZXJpc2lnbi5jb20vcmVwb3NpdG9yeS9SUEEgSW5jb3JwLiBCeSBSZWYu LExJQUIuTFREKGMpOTgxSDBGBgNVBAMTP1ZlcmlTaWduIENsYXNzIDEgQ0EgSW5kaXZpZHVh bCBTdWJzY3JpYmVyLVBlcnNvbmEgTm90IFZhbGlkYXRlZDCBnzANBgkqhkiG9w0BAQEFAAOB jQAwgYkCgYEAu1pEigQWu1X9A3qKLZRPFXg2uA1Ksm+cVL+86HcqnbnwaLuV2TFBcHqBS7lI E1YtxwjhhEKrwKKSq0RcqkLwgg4C6S/7wju7vsknCl22sDZCM7VuVIhPh0q/Gdr5FegPh7Yc 48zGmo5/aiSS4/zgZbqnsX7vyds3ashKyAkG5JkCAwEAAaN8MHowEQYJYIZIAYb4QgEBBAQD AgEGMEcGA1UdIARAMD4wPAYLYIZIAYb4RQEHAQEwLTArBggrBgEFBQcCARYfd3d3LnZlcmlz aWduLmNvbS9yZXBvc2l0b3J5L1JQQTAPBgNVHRMECDAGAQH/AgEAMAsGA1UdDwQEAwIBBjAN BgkqhkiG9w0BAQIFAAOBgQCIuDc73dqUNwCtqp/hgQFxHpJqbS/28Z3TymQ43BuYDAeGW4UV ag+5SYWklfEXfWe0fy0s3ZpCnsM+tI6q5QsG3vJWKvozx74Z11NMw73I4xe1pElCY+zCphcP XVgaSTyQXFWjZSAA/Rgg5V+CprGoksVYasGNAzzrw80FopCubjGCAhEwggINAgEBMIHhMIHM MRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0 d29yazFGMEQGA1UECxM9d3d3LnZlcmlzaWduLmNvbS9yZXBvc2l0b3J5L1JQQSBJbmNvcnAu IEJ5IFJlZi4sTElBQi5MVEQoYyk5ODFIMEYGA1UEAxM/VmVyaVNpZ24gQ2xhc3MgMSBDQSBJ bmRpdmlkdWFsIFN1YnNjcmliZXItUGVyc29uYSBOb3QgVmFsaWRhdGVkAhBGp6zM8e+7zhi5 hjSnOmbYMAkGBSsOAwIaBQCggYYwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG 9w0BCQUxDxcNOTkxMjIxMTU1MzE1WjAjBgkqhkiG9w0BCQQxFgQUY7lCqMhOjnfwjukJXsK9 phN5s84wJwYJKoZIhvcNAQkPMRowGDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDANBgkqhkiG 9w0BAQEFAASBgGf8zFJaPZIKZw4D82D2tciYhY1lsWbdbyOkjPHRPeJ0O7H8W1usryqs66Rd WzM9mNO5Ra2eV2nipmiDwiPfbMpiGkcjUWPWqdxMYKy0CMeDxz8d7tuern8ZqNDUNr7sah++ duoc1XrRugBREclk11NKadlNPWQRztmnkjzYqTZP --------------ms8C85877FAA2FE8D1FA186FB1--
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/