LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-01-2016, 12:16 PM   #16
paranoidtooth
LQ Newbie
 
Registered: Mar 2016
Posts: 3

Rep: Reputation: Disabled

Some people say it's better to use DROP as REJECTion could be abused for reflection type denial of service attacks if the attacker sends packets with forged source address. But I'm not an expert.
 
Old 04-01-2016, 12:30 PM   #17
Turbocapitalist
LQ Guru
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 5,514
Blog Entries: 3

Rep: Reputation: 2784Reputation: 2784Reputation: 2784Reputation: 2784Reputation: 2784Reputation: 2784Reputation: 2784Reputation: 2784Reputation: 2784Reputation: 2784Reputation: 2784
Quote:
Originally Posted by paranoidtooth View Post
Some people say it's better to use DROP as REJECTion could be abused for reflection type denial of service attacks if the attacker sends packets with forged source address. But I'm not an expert.
As far as I know it is the other way around. DROP allows the host to be abused for spoofing attacks. I was trying to find an article about that, but the original of the one I was thinking of is not online, perhaps the author died or went broke. The archived version is here:

http://web.archive.org/web/201410051...ll-drop-rules/
 
  


Reply

Tags
default policy, drop, iptables


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
"iptables Default Policy DROP - can't browsing.." budi.mulyana Slackware 6 02-05-2016 05:37 AM
Is it necessary to drop specific flags in IPTABLES with an INPUT DROP policy? rootaccess Linux - Networking 5 08-22-2012 08:10 PM
iptables question: default DROP policy and TCP Three Way Handshake johnnygear Linux - Networking 5 04-22-2012 08:38 PM
iptables / output *drop* policy reverse Linux - Security 3 11-22-2007 10:39 AM
Iptables drop policy problem Dakkar Linux - General 5 10-18-2006 02:38 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 04:28 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration