[linux] iptables whitelist

[Matus UHLAR - fantomas]

On 30.01.10 15:36, ma pi wrote:
> je bezpecne zadat do iptables bielej listiny ISP DNS servery? a
> default gw routra?
> 
> zadaval som to takto:
> 
> iptables -A whitelist -s IPDNS -j ACCEPT
> iptables -A whitelist -s IPDNS2 -j ACCEPT
> iptables -A whitelist -s 192.168.1.1 -j ACCEPT
> 
> rozchadzam psad a nechcem z /var/log/messages  DNS ani router ani
> localhost spravy. dik za info

bezpecne to je, nebezpecne je ich zakazat. default gw vacsinou povolenu
nepotrebujes.
Na druhu stranu, potrebujes z nich prijimat len odpovede a samotne by ta
kontaktovat nemali, pokial im nerobis primar/sekundar pre nejaku domenu
(DNS) alebo ta nemonitoruju (gw).
a do tretice, nema psad option pre vynechanie hlasenia nejakych IP, lepsi
ako hranie sa s FW?

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Your mouse has moved. Windows NT will now restart for changes to take
to take effect. [OK]