Date: Wed, 9 Jul 2003 10:24:33 +0200 From: Socketd <db@traceroute.dk> To: Terry Lambert <tlambert2@mindspring.com>, hackers@freebsd.org Subject: Re: 5 "Advanced" networking questions Message-ID: <20030709102433.0d510abc.db@traceroute.dk> In-Reply-To: <3F0BAD5C.65895290@mindspring.com> References: <20030707012205.3103dfc8.db@traceroute.dk> <20030707153314.GA1695@webboy.soth.at> <20030707180252.44036c61.db@traceroute.dk> <3F0A9A1C.25E6EB35@mindspring.com> <20030708131339.16da151f.db@traceroute.dk> <3F0AA830.9A82CB37@mindspring.com> <20030708140012.0fd685c8.db@traceroute.dk> <3F0BAD5C.65895290@mindspring.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 08 Jul 2003 22:51:24 -0700 Terry Lambert <tlambert2@mindspring.com> wrote: > > Hmm, why not just use a firewall? > > Because most firewalls, even commercial ones, don't block the > ICMP messages you appear to be interested in blocking. > > You appeared to want to turn your FreeBSD box into what's > normally called a "stealth" system: one that doesn't respond > at all to external probe attempts. So it looked like you > were trying to *write* a firewall, or at least find a set > of rules that would let your FreeBSD box act as a "stealth" > one. I am mainly trying to hide my firewall/gateway and logserver. Thank you for your reply, I'll go read a little :-) br socketd
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030709102433.0d510abc.db>