Closed vs. Stealthed ports

ozymandias · 09-23-2005, 06:02 AM

My Debian system is running with an IPTABLES firewall which seems to be working fine. However, when I run a port scan against my own machine it tells me that the ports are closed, *not* stealthed. When I use a firewall program such as firestarter, the ports appear as stealthed (but the firewall doesn't all I want it to - hence why I'm using IPTABLES)

Is there a way of 'stealthing' ports against scans but using IPTABLES commands?

jonlake · 09-23-2005, 09:56 AM

If a rule specifies a DROP target, that packet is refused access to the system and nothing is sent back to the host that sent the packet. If a rule specifies a REJECT target, the packet is dropped, but an error packet is sent to the packet's originator.

Make sure you are using Drop as an action instead of Reject.

unityxx311 · 09-23-2005, 11:02 AM

Is this a dedicated firewall system? If so you should check out m0n0wall(BSD) or if you would just like help with those iptables check out Shorewall.

Have a look here at this previous post...

m!