Please rate my iptables script

matt3333 · 11-12-2003, 09:36 PM

SOMEONE???? ANYONE!!!!!!! Please help me!!!

Matt3333

gonzalo · 11-13-2003, 06:04 AM

Hi

i'm in slakware too and i just commented those ones out
#. /etc/init.d/functions
#. /etc/sysconfig/network
since they don't exist in a slack system (remember it's BSD init, not SysV)

also, look for what you have in the line Nº20 of you script to find out what that "unary operator expected" is

kahpeetan · 11-14-2003, 12:06 AM

just my 2cents worth:

might wanna add this in there too

iptables -A INPUT -p icmp -icmp-type 8 -m string -string "|0000000000000000|" -j DROP

for superscan pings ...and prolly a couple of string match for "/bin/sh", "/bin/bash", "command.com", "xp_sendmail" and "xp_startmail" just to protect other windoze users on ur LAN

/bin/bash · 11-14-2003, 04:17 AM

matt3333
Like gonzalo said you can comment out those two lines as the only place I see that is being used is

if [ ${NETWORKING} = "no" ]
then
exit 0
fi

So you could make an /etc/sysconfig/network file and put a line like this if you wanted to.
NETWORKING="yes"

matt3333 · 11-14-2003, 01:32 PM

Ok i commented out those two lines. But it still doesnt work so ill post line 20 and see if anyone knows why it isent working Thanx:

this is line 20: /sbin/modprobe iptable_nat

should i try to modprobe this?? by myself or should i check to see if that modules gets loaded??? it doesnt make sense tho??? Thanx for ur replys!!!

matt3333

gonzalo · 11-14-2003, 02:12 PM

try
#modprobe iptable_nat
as root and tell us what you get

bluenirve · 11-19-2003, 09:15 PM

bump (good firewall)