Re: Stuffed ICMP masquerading

Article View: demon.tech.unix

Article #459

#459

From: Paul Black
Date: Wed, 08 Mar 2000 00:00

16 lines
1297 bytes

Nigel Cole <spamtin@zebekia.demon.co.uk> wrote:
> If I've read the output correctly, the REJECT was caused by output rule
> #3, and the rejected connection was an ICMP "Host unreachable" error.
> This rule is:
> 
> # outgoing from local net on remote interface, stuffed masquerading
> ipchains -A output -i $extint -s $intnet -d 0.0.0.0/0 -l -j REJECT
> 
> ($extint is ppp0, $intnet is 192.168.0.0/24)

This rule rejects everything leaving your network.

Without the previous rules, I can't offer an opinion as to what should
be allowed out.

Paul

Technical Details

Message-ID: <38C61439.52B9920D@oxsemi.com>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <xuWD+XAfrVx4EwkW@zebekia.demon.co.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fac57,e9cef78eb261a0c1
X-Google-Attributes: gidfac57,public
From: Paul Black <paul.black@oxsemi.com>
Subject: Re: Stuffed ICMP masquerading
Date: 2000/03/08
Message-ID: <38C61439.52B9920D@oxsemi.com>
X-Deja-AN: 594630266
Content-Transfer-Encoding: 7bit
X-NNTP-Posting-Host: mercury.oxsemi.com:212.240.33.130
References: <xuWD+XAfrVx4EwkW@zebekia.demon.co.uk>
Content-Type: text/plain; charset=us-ascii
X-Complaints-To: abuse@demon.net
X-Trace: news.demon.co.uk 952506001 nnrp-01:16297 NO-IDENT mercury.oxsemi.com:212.240.33.130
Organization: Oxford Semiconductor Ltd.
Mime-Version: 1.0
NNTP-Posting-Date: 8 Mar 2000 08:50:01 GMT
Newsgroups: demon.tech.unix

Reply to Parent Message