Re: stopping ip spoofing on rh6.1 box

[Thomas Ribbrock \(Design/DEG\)]

On Tue, Feb 15, 2000 at 01:25:18PM -0800, matt boex wrote:
> i am trying to alter my firewall to not allow ip
> spoofing.  i have read the man pages on ipchains and
> there is a small script to run on boot before any
> network devices are initialized.  which file would i
> insert into, i don't figure that would be rc.local. 
> would it be rc.sysint?  i am running rh6.1 by the way.

Depends on your setup. If you have a permanent IP address, I'd put it
into rc.local (actually, I'd write a script called rc.firewall and call
that from rc.local - just to keep things nice and tidy). That way, the
firewall is in place on bootup.
I myself have a dynamic connection (PPP) and I run the script from the
if-up script which gets run after the link is established. That way,
the firewall gets set up with the correct IP address each time I dial
in.

HTH,

Thomas
-- 
             "Look, Ma, no obsolete quotes and plain text only!"

     Thomas Ribbrock | http://www.bigfoot.com/~kaytan | ICQ#: 15839919
   "You have to live on the edge of reality - to make your dreams come true!"


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.