How do I DROP filtered packets on a Cisco router

enyawix · 05-31-2011, 10:37 PM

I bought a Cisco 1841 to study for a cisco certs. In iptables terms filtered packets are -j REJECT instead of -j DROP. To make things worse telnet and ping replies are on by default.

acid_kewpie · 06-01-2011, 01:58 AM

What are you actually asking? Do you just need to read up on ios IP access-list commands? Sounds like you simply need to study Cisco configuration in general.

enyawix · 06-01-2011, 07:34 AM

I asked here because no one in my cisco class seems to know the difference between rejecting a packet and dropping packet.Computer users are just as good as they once were.

acid_kewpie · 06-01-2011, 07:36 AM

reject = tell the client to go $#@! themselves
drop = ignore the client

rejecting is, somewhat oddly, more polite, but does also logically "leak" information in that the service, or at least the end system, does probably exist and someone doesn't want you playing with it.

enyawix · 06-23-2011, 08:24 PM

Thanks for replying. You are the only person who understands the problem. $1k router and I hate it. I went back to iptables because I see the Cisco as a security risk.

acid_kewpie · 06-24-2011, 01:26 AM

Quote:

Originally Posted by enyawix

Thanks for replying. You are the only person who understands the problem. $1k router and I hate it. I went back to iptables because I see the Cisco as a security risk.

Well with all due respect, that's just daft. A Cisco router is NOT a security risk, a Cisco router and a network administrator without the right skills is a security risk. I would *ALWAYS* prefer a dedicated high quality security device to iptables.