INPUT chain

[dmartin at LanCity.COM (Derek Martin)]

On Fri, 27 Aug 1999, Subba Rao wrote:

> 
> $ ipchains -A input -i ppp0 -p 21 -j DENY
> $ ipchains -A input -i ppp0 -p 23 -j DENY
> $ ipchains -A input -i ppp0 -p 80 -j DENY
> 
> What is wrong with the above rules? What am I doing wrong?

With IPCHAINS, the -p option specifies the protocol, i.e. TCP, UDP, ICMP
etc.  You CAN specify them as numbers... ICMP = 1, TCP =6, UDP = 17.  I 
have no idea what protocols 21 23 and 80 are, if they correspond to
protocols at all. 

You want to specify the destination PORT, so instead do

ipchains -A input -i ppp0 -d 0/0 21 -j DENY

etc


Derek D. Martin   |  UNIX System Administrator
derek at netria.com  |  dmartin at lancity.com

-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).