domains on linux

Andrew G. Hammond drew-vnkfHpbZfesgsBAKwltoeQ at public.gmane.org
Sat Oct 25 18:02:55 UTC 2003


You have to patch in the iptables string module and then match against 
HTTP queries on port 80. Very effective at blocking L3 scanners. I'm 
hoping they'll include the string module in 2.6 after it gets outa 
feature freeze. There was a recent LJ article about blocking KaZaA that 
demonstrates the use of that module rather well.

Drew


Madison Kelly wrote:

> IIRC from reading the man page on NMAP or IPTables isn't there a way 
> to setup a box/firewall to not answer port scans? Something about 
> simply not responging unless it is a specific request for the server 
> (ie. http-get request for Apache)? I wish I could remember details but 
> anyway it might be a way to keep Rogers off your back.
>
> Madison
>
> serge_ss-rieW9WUcm8FFJ04o6PK0Fg at public.gmane.org wrote:
>
>> Well, you'll probably end up with a bunch of angry calls from Rogers, 
>> because they officially do not allow having Web (or any other) 
>> servers, and AFAIK portscan you periodically.
>>
>> But, in general, to access your web server from outside, you will 
>> have to map port to internal IP, i.e. requests that come to address 
>> 24.64.xx.xx port 80 are transfered to 192.18.xx.xx (Web server) port 80.
>>
>> I am not quite sure about what you mean by "..... how do i setup the 
>> domain for the webserver and have my other hosts (cuttently connected 
>> to the router ) connect to that domain".....
>>
>>
>> Sergey
>>
>>
>>
>>> From: "Fiifi Markin" <markino_05-PkbjNfxxIARBDgjK7y7TUQ at public.gmane.org>
>>> Date: 2003/10/23 Thu AM 10:22:42 EST
>>> To: tlug-lxSQFCZeNF4 at public.gmane.org
>>> Subject: [TLUG]: domains on linux
>>>
>>> hello,
>>> i have a router that distributes my internet connection from  rogers 
>>> cable, i am connected to the router on a dhcp protocol, and i wan to 
>>> setup a web server for my website. my problem is i know very little 
>>> a bout networking, i am using internal ip's(192.168.....) for my 
>>> network, and the address which is comminf from rogers is a 
>>> 24.64....... how do i setup the domain for the webserver and have my 
>>> other hosts (cuttently connected to the router ) connect to that domain
>>>
>>> _________________________________________________________________
>>> MSN 8 with e-mail virus protection service: 2 months FREE*  
>>> http://join.msn.com/?page=features/virus
>>>
>>> -- 
>>> The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
>>> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
>>> How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml
>>>
>>
>>
>> -- 
>> The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
>> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
>> How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml
>>
>
> -- 
> The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
> How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml


--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml





More information about the Legacy mailing list