iptables a zakaz :80

[Jiri Navratil]

Pokud to delate na routeru tak ten zakaz musite vlozit do retezce FORWARD. Retezec INPUT resi pouze pakety prichazejici na localhost.

--
Jiri Navratil


> DD!!
>     Potrebuji zakazat 80 port a nejak se nedari ... zkousim:
> iptables -A INPUT -p tcp  -s 192.168.0.0/16 -d 0/0 --dport 80  -j DROP
> iptables -A INPUT -p udp -s 192.168.0.0/16 -d 0/0 --dport 80  -j DROP
> 
> [root na spoje at /etc/rc.d] iptables -L -n -v
> Chain INPUT (policy ACCEPT 6 packets, 300 bytes)
>  pkts bytes target     prot opt in     out     source               destination
>     0     0 DROP       tcp  --  *      *       192.168.0.0/16       0.0.0.0/0          tcp dpt:80
>     0     0 DROP       udp  --  *      *       192.168.0.0/16       0.0.0.0/0          udp dpt:80
> 
> Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
>  pkts bytes target     prot opt in     out     source               destination
> 
> Chain OUTPUT (policy ACCEPT 4 packets, 300 bytes)
>  pkts bytes target     prot opt in     out     source               destination
> 
> ... inet vsak jede smele dal. Nevite nekdo jak na to?
>                                                                             V.V.
> 
> PS: s ipchains stacilo toto: ipchains -A input -s 192.168.0.0/16 -d 0/0 80 -p tcp -j DENY
>