filter packet Post: 302627949

Sponsored Content

Special Forums Cybersecurity filter packet Post 302627949 by numeracy on Sunday 22nd of April 2012 01:18:41 PM

04-22-2012

Registered User

filter packet

Exercise:
Protection of WEB and DNS servers using the context-free rules for packet filtering:
- Protect your WEB-server, so that would be for him can be accessed by browsers, and could go to dns.
- Protect your primary DNS-server so that it could be to contact clients and secondary servers.
- Allow ICMP ping to / from your site (s).
- the rest is declined.

My solution that:

Code:

#service iptables start
#iptables -P INPUT DROP
#iptables -P OUTPUT DROP
#iptables -P FORWARD DROP
#iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
#iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
#service iptables save
#serivce iptables reload

but i don't know why my code doesn't work!!!

numeracy

View Public Profile for numeracy

Find all posts by numeracy

8 More Discussions You Might Find Interesting

1. IP Networking

Seeing IP packet

Hi, Is there any way that i can directly take out the IP packet and see its contents. Waiting for your answer .............. Bye

2. Programming

packet capture

can anyone tell me how can i capture the packets. i have tried ethernet software to capture them but its not doing what i want it to do it

3. IP Networking

Packet decoding

Hi, wondering if anyone can suggest a tool to me that will let me either cut & paste hex or type it in for packet decoding. I want to be able to decode a packet as done with tcpdump or wireshark, but I want to be able to manually input the hex myself.

4. Programming

Berkley Packet Filter Question

Hi, Is there any simple way to stop a bpf device from seeing frames that it sent? An ioctl call perhaps? Any advice would be helpful

5. Homework & Coursework Questions

filter packet

Exercise: Protection of WEB and DNS servers using the context-free rules for packet filtering: - Protect your WEB-server, so that would be for him can be accessed by browsers, and could go to dns. - Protect your primary DNS-server so that it could be to contact clients and secondary servers....

6. IP Networking

Berkley Packet Filter

Hi Folks! Im trying to write a packet capture filter on a opnet device. The syntax there to write this filter is BPF. What I wanna do is to capture everything, but from a certain ip-range I just wanna capture the header and not the payload. For your understanding: We are writing our backup to...

7. AIX

Packet loss coming with big packet size ping

8. Solaris

WakeOnLan, tcp packet

I'd like to use SPARC Solaris10 to 'wake up' an old PC on same LAN. what is the simplest way of doing it? (preferably without installing new software) thanks.

LEARN ABOUT CENTOS

ipa-dns-install

ipa-dns-install(1)						 IPA Manual Pages						ipa-dns-install(1)

NAME

       ipa-dns-install - Add DNS as a service to an IPA server

SYNOPSIS

       ipa-dns-install [OPTION]...

DESCRIPTION

       Adds DNS as an IPA-managed service. This requires that the IPA server is already installed and configured.

OPTIONS

       -p DM_PASSWORD, --ds-password=DM_PASSWORD
	      The password to be used by the Directory Server for the Directory Manager user

       -d, --debug
	      Enable debug logging when more verbose output is needed

       --ip-address=IP_ADDRESS
	      The IP address of the IPA server. If not provided then this is determined based on the hostname of the server.

       --forwarder=FORWARDER
	      A  forwarder  is a DNS server where queries for a specific non-resolvable address can be directed. To define multiple forwarders use
	      multiple instances of --forwarder

       --no-forwarders
	      Do not add any DNS forwarders, send non-resolvable addresses to the DNS root servers.

       --reverse-zone=REVERSE_ZONE
	      The reverse DNS zone to use

       --no-reverse
	      Do not create new reverse DNS zone. If used on a replica and a reverse DNS zone already exists for the subnet, it will be used.

       --zonemgr
	      The e-mail address of the DNS zone manager. Defaults to hostmaster@DOMAIN

       -U, --unattended
	      An unattended installation that will never prompt for user input

EXIT STATUS

       0 if the installation was successful

       1 if an error occurred

IPA
								   Jun 28, 2012 						ipa-dns-install(1)