LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - General (https://www.linuxquestions.org/questions/linux-general-1/)
-   -   banning an ip (https://www.linuxquestions.org/questions/linux-general-1/banning-an-ip-53940/)

MasterC 04-08-2003 02:29 PM

Quote:

Originally posted by Shinobi
Which file is read first, or takes more presidence:
hosts.deny
hosts.allow



http://www.wundermoosen.com/TMAHelp/pgs/inetdconf.htm

"If hosts.allow were to say: "grant access to all" and if hosts.deny were to say: "deny access to all", the hosts.deny entry would not trump hosts.allow. It would be ignored."

So hosts.deny is used to fine tune hosts.allow and not otherwise.

Cool, thank you very much for clarifying that for me :)

cuckoopint 04-08-2003 07:17 PM

Quote:

AFAIK blocking anything by MAC addr will only work inside a LAN, not outside.
I was thinking of wireless for some reason...
; )

maxspeed 04-10-2003 09:17 AM

Quote:

Originally posted by Shinobi
It won't make your hardware invisible to him. This is a software firewall, not quite as effective as a true firewall.
heh you sure try scanning a linux box with only this rule and see what you get

iptables -A INPUT -p tcp -j REJECT --reject-with tcp-reset

and everyone knows that a software firewall is not as effective as a software.

Shinobi 04-10-2003 10:07 AM

The point was: don't think you're getting off easy. Any noob would look at that and think they are safe.

YOU aren't everyone. Everyone doesn't know the difference between a software and hardware firewall.

Calm down pal. :tisk:


All times are GMT -5. The time now is 09:44 AM.