LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-21-2013, 04:06 PM   #1
catkinso
LQ Newbie
 
Registered: Nov 2013
Posts: 2

Rep: Reputation: Disabled
blocking Bonjour / Airplay ports & service advertisement


I would like to prevent these services from traversing the network however despite numerous port blocking attempts the service are generally discover able.

Can anyone suggest a working configuration which blocks these services from being advertised. I have tried the ports below to no avail:

iptables -I OUTPUT -p tcp --sport 443 -j DROP
iptables -I OUTPUT -p udp --sport 554 -j DROP
iptables -I OUTPUT -p tcp --sport 554 -j DROP
iptables -I OUTPUT -p udp --sport 1900 -j DROP
iptables -I OUTPUT -p tcp --sport 3689 -j DROP
iptables -I OUTPUT -p tcp --sport 5297 -j DROP
iptables -I OUTPUT -p tcp --sport 5298 -j DROP
iptables -I OUTPUT -p udp --sport 5298 -j DROP
iptables -I OUTPUT -p udp --sport 5350 -j DROP
iptables -I OUTPUT -p udp --sport 5351 -j DROP
iptables -I OUTPUT -p udp --sport 5353 -j DROP
iptables -I OUTPUT -p udp --sport 49159 -j DROP
iptables -I OUTPUT -p udp --sport 49163 -j DROP


iptables -A INPUT -m pkttype --pkt-type broadcast -j DROP
iptables -A INPUT -m pkttype --pkt-type multicast -j DROP

iptables -A OUTPUT -o wlan1 -m pkttype --pkt-type broadcast -j DROP
iptables -A OUTPUT -o wlan1 -m pkttype --pkt-type multicast -j DROP
 
Old 11-29-2013, 06:22 PM   #2
Lantzvillian
Member
 
Registered: Oct 2007
Location: BC, Canada
Distribution: Fedora, Debian
Posts: 210

Rep: Reputation: 41
Okay I understand you are trying to block traffic... from what on what? are you trying to block outbound traffic from your host hence the OUTPUT chain? OR are you on a router and trying to block from the FORWARD chain?

Your setup is ambiguous and I cannot help without more information please
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Blocking all ports ehab_8 Linux - Security 5 11-26-2006 04:30 PM
Linux Advertisement Blocking Program Needed cousinlucky Linux - Newbie 17 12-22-2005 11:29 AM
blocking ports rocketgo Linux - Software 3 11-11-2003 06:50 PM
Advertisement blocking thegreatgatsby Linux - Software 2 09-23-2003 12:09 PM
Blocking ports for a specific IP Shrimpy Linux - Networking 1 12-23-2002 11:48 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:02 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration