> Any other good idea ?
>
> Thanks alot!
>
> Lei

Use an iptables firewall script, but don't run it so tight. Learn a little
about iptables and roll your own.

Jeez - even Monmotha's script doesn't even let me ping the server from a
client I found out the other day.

Just a side-note to everyone else:

I realise there's things like ping-floods, DOS attacks etc. etc. etc. and we
have to protect against them, but most users would choose an intermediate or
high firewall setting when they set up their boxes. Both these block ICMP
requests. A lot of users are running ping to test network connectivity.

Is there any way to get around this problem? Surely the default firewall
set-up could be set up to allow ICMP request from the internal interface,
just not forward those from the external?

Sorry if I sound naive. Firewalls are not my strong point, but I know I find
myself sighing every time I'm testing connectivity on a Linux network, and I
have to turn off the user's firewall just to test with ping. Invariably I
always forget.

Regards,

---
Edward Dekkers (Director)
Triple D Computer Services P/L




-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to