Gentoo Archives: gentoo-user

From: Daniel Iliev <danny@××××××××.com>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Re: OT: A netbios-ssn blocking rule?
Date: Thu, 24 Aug 2006 01:38:55
Message-Id: 44ED0281.9020806@ilievnet.com
In Reply to: Re: [gentoo-user] Re: OT: A netbios-ssn blocking rule? by gentuxx
1 gentuxx wrote:
2 > Actually, some of those ports are UDP. /etc/services says the same for
3 > both TCP and UDP. So if -p is required for --dport, you would have to
4 > add rules for UDP as well.
5 >
6 > iptables -A FORWARD -d *target-PC* -p udp --dport 137:139 -j DROP
7 > iptables -A INPUT -p udp --dport 137:139 -j DROP
8 >
9
10 gentuxx, I'm not 100% sure about this, but I think MS NetBIOS doesn't
11 use UDP (only TCP). However theoretically you are absolutely right.
12
13 --
14 Best Regards,
15 Daniel
16 --
17 gentoo-user@g.o mailing list