iptables question on INPUT DROP

ForumKid · 01-30-2002, 04:52 PM

If i start out as:
$IPT -P INPUT DROP
$IPT -A INPUT -s 0/0 -p tcp -d 192.168.2.2 --dport 80 -j ACCEPT

This will only accept port 80 stuff. everything else gets dropped including icmp/etc.
Is this a true statement?

Thanks

raz · 01-31-2002, 09:36 AM

Quote:

Originally posted by ForumKid
If i start out as:
$IPT -P INPUT DROP
$IPT -A INPUT -s 0/0 -p tcp -d 192.168.2.2 --dport 80 -j ACCEPT

This will only accept port 80 stuff. everything else gets dropped including icmp/etc.
Is this a true statement?

Thanks

No the correct statement would be.
This will only accept incoming destination port 80 connections, to internal the ip address from any source with any source port, and only TCP type 6 protocol.

/Raz

ForumKid · 01-31-2002, 11:29 AM

Thanks...but would this make it more secure????
$IPT -A INPUT -s 0/0 --sport 80 -p tcp -d 192.168.2.2 --dport 80 -j ACCEPT

SHouldnt all connections coming to my webserver on port 80 be coming from port 80?
Thanks again

raz · 02-12-2002, 09:21 AM

No..
Client connect to a privileged port. 1-1024 "i.e httpd 80"
Client connects from a unprivileged port. 1024-65535

Sorry I would have replied quicker but my harddisk caught fire.

/Raz