Well after some investigating, i found that the e-smith is useing wonderfull ipchains
its in the /bin directory, you accualy have to goto the directory becuase theres no path for in you profile. but for some port filtering you can run somthing like this :
ipchains -A input -s 192.168.1.1 -p icmp -j DENY
this is for ping of corse.. (change the ip to yours as well), this will deny any incomming pings for outside computers. this also works with the rest of the ports as well ex.
ipchains -A input -s 192.168.1.1 -p smtp -j DENY
ipchains -A input -s 192.168.1.1 -p nntp -j DENY
heres a little explanation
ipchains -A input -s 127.0.0.1 -p icmp -j DENY
ipchains - the program itself
-A - this tells ipchains to add a rule
input - specifies witch rule set (input,output,forward,etc.)
-s - i can remember exactly what this means. you just need it
192.168.1.1 - self explanitory
-p - tells ipchains that there is a specific port involed
smpt - this port involed, here i have the name but you can also but the #
-j - i forget this one to..
DENY - tells is chains to deny any packets from selected port
and now you have it. this conculdes ipchains 101. *laugh*
this is basic and in NO way secure.. ipchains is a very good piece if linux software and i definaty encourage you to check out this site (this is where i learned all about ipchains)
http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO-4.htmlas well there is a ip-masqurade howto here as well..
Jason
6 Replies
870 Views