Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
I want to block all incoming and forwarding connections, except those necessary for everyday use. I had tried that, but it I lose connection to the internet, so obviously there are some exceptions, what are they? I thought just blocking them would be enough, but I need some exceptions .
In summary, I'm looking for exceptions that will allow me to connect to the internet with minimal exceptions used. If it helps, the laptop uses DHCP and uses a network printer. That's pretty much the only things I would see being needed. Any help is greatly appreciated.
Sorry, that was what I meant. I want to do this using iptables. I tried using "iptables -P INPUT DROP" and "iptables -P FORWRAD DROP", but I lost connectivity to the internet, so obviously their are some exceptions which I'm not sure of.
Sorry, that was what I meant. I want to do this using iptables. I tried using "iptables -P INPUT DROP" and "iptables -P FORWRAD DROP", but I lost connectivity to the internet, so obviously their are some exceptions which I'm not sure of.
well, the FORWARD rule is unrelated if you're not doing forwarding - and it doesn't sound like you are... but check with a:
Code:
cat /proc/sys/net/ipv4/ip_forward
as for the "iptables -P INPUT DROP", you are correct in that you'd need a couple rules in order for that to work... they are:
Code:
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.