Iptables Ruleset aporia

[Vasilis Vasaitis]

On Tue, Aug 03, 2004 at 04:02:29AM +0300, V13 wrote:
> On Monday 02 August 2004 17:39, beatnik wrote:
> > Pos akrivos mporo na oriso to firewall (iptables) ruleset etsi oste na mou
> > epistrefei paketa mono omos apo connections tis opoies ego o idios ekana
> > initiate first?
> >
> > Euxaristo.
> 
> Yparxei ena patch gia iptables to opoio apothikevei to markid stis 
> kataxoriseis toy conntrack. To mono poy xreiazesai afoy to baleis einai na:
> 
> a) Markareis tis syndeseis poy ksekinises esy
> b) Apothikeveis to markid
> c) Elegxeis ola ta paketa me ayto to markid
> 
> To sygkekrimeno patch to exo dokimasei gia alo skopo kai doylevei mia xara.

  Δε χρειάζεται όμως patch, αυτό που ρωτάει γίνεται όμορφα κι ωραία με
το "state" module που έχει από τη μάνα του το iptables (hint:
ESTABLISHED), οπότε γιατί να παιδεύεσαι;


-- 
Vasilis Vasaitis
"A man is well or woe as he thinks himself so."