Re: Protecting against spoofing with IPTABLES

2005-06-30 Thread Jon Dowland
On 6/30/05, Simon <[EMAIL PROTECTED]> wrote: > iptables -F > iptables -A INPUT -i lo -j ACCEPT > iptables -N SPOOF > iptables -A SPOOF -i eth1 -j SPOOF I think that's wrong. You're appending a rule to the SPOOF table which specifies that all packets from eth1 are to be jumped to the SPOOF chain..

Protecting against spoofing with IPTABLES

2005-06-29 Thread Simon
Hi There, Using debian testing with two ethernet cards.. To get eth1 (on a seperate subne) working correctly, ive had to change /proc/sys/net/ipv4/conf/eth1/rp_filter to 0. Now i need a simple solution to protect against spoofing attacks on this interface... I have an example setup, but i wan