LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 08-11-2003, 07:41 PM   #1
cli_man
Member
 
Registered: Apr 2002
Location: New York, USA
Distribution: Redhat 7.2, 9.0 Slackware 9.1
Posts: 428

Rep: Reputation: 30
Block incoming port Iptables


I need to be able to block all port 135 traffic going though my linux router, incoming and outgoing, how can I add a rule to my iptables to do that, I don't care to save the rule I just need to add it to what is already loaded.

This is a cache server so iptables is already being used, I want to block port 135 to stop a new virus that is really hitting our customers (W32.Blaster.Worm)

Thanks, I hope to hear from someone soon!
 
Old 08-11-2003, 08:26 PM   #2
cli_man
Member
 
Registered: Apr 2002
Location: New York, USA
Distribution: Redhat 7.2, 9.0 Slackware 9.1
Posts: 428

Original Poster
Rep: Reputation: 30
Ok I think I got it, post if I did it wrong:

iptables -A INPUT -p tcp -i eth0 -s 0/0 --dport 135 -j DROP
iptables -A INPUT -p udp -i eth0 -s 0/0 --dport 135 -j DROP

When I did a iptables -L they were all there and I can still route traffic so I will assume that it is working, is there a log to see if it denies the traffic?

Thanks
 
Old 08-11-2003, 09:12 PM   #3
seabass55
Member
 
Registered: Jan 2003
Location: 127.0.0.1
Distribution: Fedora&Gentoo
Posts: 207

Rep: Reputation: 30
How about having your customers patch their boxes?

Looks like you did it right. You can always have someone port scan you or do it online at someplace like http://scan.sygate.com/
 
Old 08-11-2003, 09:21 PM   #4
cli_man
Member
 
Registered: Apr 2002
Location: New York, USA
Distribution: Redhat 7.2, 9.0 Slackware 9.1
Posts: 428

Original Poster
Rep: Reputation: 30
We have well over 1000 customers going through us and wanted a way to stop it quick, most of our customers don't have a clue what OS they have not alone if they patched there system, most of them don't know what Internet Exporer is even though they use it every day.

So in short by blocking this as quick as I could I just made my day tomarrow much better because I now don't need to trouble shoot 1,000 plus customers just the few that got it before I blocked it.
 
Old 08-11-2003, 09:27 PM   #5
seabass55
Member
 
Registered: Jan 2003
Location: 127.0.0.1
Distribution: Fedora&Gentoo
Posts: 207

Rep: Reputation: 30
Oh I know...I was just giving you crap. I knew what you were up to. It was kinda aiming at being a windows joke
 
Old 08-11-2003, 09:32 PM   #6
cli_man
Member
 
Registered: Apr 2002
Location: New York, USA
Distribution: Redhat 7.2, 9.0 Slackware 9.1
Posts: 428

Original Poster
Rep: Reputation: 30
The owner of the company I work for has been getting more and more linux friendly as we go throught one problem to another with our windows servers to where I was talking to him tonight and he said we are going to move all but 1 of our servers to linux in the next couple of weeks :-)

I have been slowly moving servers over to linux as we install new ones but now we will be migrating our existing nt 4.0 and 2000 servers over to linux, much fun to be had and a good tribute to Linux.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How can I block all traffic to port 110 to and IP using IPtables? abefroman Linux - Networking 8 11-16-2005 08:26 PM
Iptables help, block port to outside but open to inside. Brian1 Linux - Networking 2 09-27-2005 09:41 PM
iptables, block port 80? frank2 Linux - Security 4 09-12-2004 10:14 AM
NOOB: Firewall how do I configure it to block all incoming info? PionexUser Linux - Security 1 11-19-2003 11:39 PM
iptables - howto block by a port and IP address -HELP! macnanc Linux - Networking 2 03-07-2003 05:45 AM


All times are GMT -5. The time now is 05:05 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration