On Fri, 2002-12-13 at 09:05, Todd Robinson wrote:
>
> > This would drop most of it:
> >
> > iptables -A INPUT -i eth(x) -p tcp --dport 137:139 -j DROP
>
> Thanks, need another one for the udp traffic. Also not sure if you need
> to do another set for source ports. I hadn't thought of consolodating
> the rules yet, just been adding new ones as I saw them in the logs...
You are absolutely correct. That was a snafu on my part.
You could use two rules:
iptables -A INPUT -i eth(x) -p tcp --dport 137:139 -j DROP
iptables -A INPUT -i eth(x) -p udp --dport 137:139 -j DROP
--Matt Miller Systems Administrator MP TotalCare gpg public key id: 08BC7B06
-- An improperly trained Samurai dies quickly.
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 19:13:43 EDT