[CentOS] Hacking Issue

[Jennifer Botten]

-----Original Message-----
From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf
Of Jorge Fábregas
Sent: 26 September 2011 01:09 PM
To: centos at centos.org
Subject: Re: [CentOS] Hacking Issue

On 09/26/2011 07:02 AM, Jennifer Botten wrote:
> -A INPUT -i eth0 -d 209.61.231.42 -p udp -j DROP

This needs to be:

-A OUTPUT -i eth0 -d 209.61.231.42 -p udp -j DROP

...if you want to drop packets initiated from your system to that
ip...which doesn't make any sense if you're dropping all the incoming
connection from that ip.

 On why are you still getting packets from that ip... perhaps there's
also TCP traffic?  If you want to completely drop packets from that ip
simply remove the protocol argument like this:

-A INPUT -i eth0 -s 209.61.231.42 -j DROP

HTH,
Jorge
_______________________________________________
CentOS mailing list
CentOS at centos.org
http://lists.centos.org/mailman/listinfo/centos

Hi Jorge,

I am blocking UDP and TCP from that IP. I also have an OUTPUT rule however
mine has the -o eth0 as the -i eth0 does not work.

Regards
Jennifer