Wonder if anyone can help. I've just come over to Linux from Windows. I've been trying to configure shorewall and it seems to be up and running which is a good sign. The only thing is, it's running but it appears to be wide open.
I ran nmap against my box from another machine connected to the internet. I had quite a few ports in state open and certain ports were accepting connection requests. Not to secure eh
I have a policy to reject all from the net to the fw.
I've tried adding various rules also such as reject all from the net to a specified port on tcp + udp. But nmap still picks these pesky ports up as open and I can still connect to them
What am i missing?