[bglug] Uno stealth nella rete...

[Asperti Paolo]

Il giorno 31/mar/08, alle ore 16:10, dario.anzani@cheapnet.it ha  
scritto:
> iptables -A INPUT -p tcp -m state -s TUO_IP_TRUSTATO --dport 22
> --state NEW -j ACCEPT

io aggiungerei
  --mac-source [mac:address:]

per verificare il mac-address

meglio ancora una catena apposita:

iptables -N MACFILTER
iptables -A MACFILTER -p tcp  --mac-source  00:00:00:00:00:00 -j RETURN
iptables -A MACFILTER -p tcp  --mac-source  00:00:00:00:00:00 -j RETURN
iptables -A MACFILTER -p tcp  --mac-source  00:00:00:00:00:00 -j RETURN
iptables -A MACFILTER -p tcp  --mac-source  00:00:00:00:00:00 -j RETURN
iptables -A MACFILTER -p tcp  --mac-source  00:00:00:00:00:00 -j RETURN
iptables -A MACFILTER -j DROP
iptables -A INPUT -j MACFILTER



--
Asperti Paolo
paolo@asperti.com