filter packet Post: 302627949

Sponsored Content

Special Forums Cybersecurity filter packet Post 302627949 by numeracy on Sunday 22nd of April 2012 01:18:41 PM

04-22-2012

Registered User

filter packet

Exercise:
Protection of WEB and DNS servers using the context-free rules for packet filtering:
- Protect your WEB-server, so that would be for him can be accessed by browsers, and could go to dns.
- Protect your primary DNS-server so that it could be to contact clients and secondary servers.
- Allow ICMP ping to / from your site (s).
- the rest is declined.

My solution that:

Code:

#service iptables start
#iptables -P INPUT DROP
#iptables -P OUTPUT DROP
#iptables -P FORWARD DROP
#iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
#iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
#service iptables save
#serivce iptables reload

but i don't know why my code doesn't work!!!

numeracy

View Public Profile for numeracy

Find all posts by numeracy

8 More Discussions You Might Find Interesting

1. IP Networking

Seeing IP packet

Hi, Is there any way that i can directly take out the IP packet and see its contents. Waiting for your answer .............. Bye

2. Programming

packet capture

can anyone tell me how can i capture the packets. i have tried ethernet software to capture them but its not doing what i want it to do it

3. IP Networking

Packet decoding

Hi, wondering if anyone can suggest a tool to me that will let me either cut & paste hex or type it in for packet decoding. I want to be able to decode a packet as done with tcpdump or wireshark, but I want to be able to manually input the hex myself.

4. Programming

Berkley Packet Filter Question

Hi, Is there any simple way to stop a bpf device from seeing frames that it sent? An ioctl call perhaps? Any advice would be helpful

5. Homework & Coursework Questions

filter packet

Exercise: Protection of WEB and DNS servers using the context-free rules for packet filtering: - Protect your WEB-server, so that would be for him can be accessed by browsers, and could go to dns. - Protect your primary DNS-server so that it could be to contact clients and secondary servers....

6. IP Networking

Berkley Packet Filter

Hi Folks! Im trying to write a packet capture filter on a opnet device. The syntax there to write this filter is BPF. What I wanna do is to capture everything, but from a certain ip-range I just wanna capture the header and not the payload. For your understanding: We are writing our backup to...

7. AIX

Packet loss coming with big packet size ping

8. Solaris

WakeOnLan, tcp packet

I'd like to use SPARC Solaris10 to 'wake up' an old PC on same LAN. what is the simplest way of doing it? (preferably without installing new software) thanks.

LEARN ABOUT DEBIAN

desproxy-dns

desproxy-dns(1) 						   User Commands						   desproxy-dns(1)

NAME

       desproxy-dns - DNS for dynamic connections

SYNOPSIS

	  desproxy-dns dns_server proxy_host proxy_port

OPTIONS

       None

DESCRIPTION

       If you have direct DNS access then you don't need to do anything else.  You know you have direct DNS access if you can resolve host names
       to IP addresses.

       NOTE: as desproxy-dns listens in port 53 (which is less than 1024) you may need administrator privileges to exec desproxy-dns (in fact if
       you are running UN*X, you actually have to run desproxy-dns as root).

       OK, so you have a dns server accessible now. But your computer doesn't know anything about that. You must configure your network
       accordingly (again, need to be root in UN*X).

       Edit /etc/resolv.conf and add the line "nameserver 127.0.0.1". You don't have to restart anything. Just test ping and see if it works.

ENVIRONMENT

       None.

FILES

       None.

SEE ALSO

       dnsproxy(1), ping(1)

AUTHORS

       This manual page was written by Jari Aalto <jari.aalto@cante.net>, for the Debian GNU system (but may be used by others). Released under
       license GPL v2 or any later version.

desproxy-dns							    2012-03-26							   desproxy-dns(1)