network profile
| bio | website | lukabloga.blogspot.com |
|---|---|---|
| location | Slovenia | |
| age | 34 | |
| visits | member for | 2 years, 3 months |
| seen | Oct 15 '12 at 13:38 | |
| stats | profile views | 1 |
Just another geek.
|
Feb 10 |
comment |
hosts.deny not blocking ip addresses Another thing, that sometimes bites me inn Linux some config files, need to end in newline as in empty last line. |
|
Feb 10 |
comment |
hosts.deny not blocking ip addresses Ok, try pasting some of the following output: "cat /var/log/auth.log | grep ssh" |
|
Feb 10 |
comment |
hosts.deny not blocking ip addresses Can you try "# ldd /usr/sbin/sshd | grep libwrap" To see if you have support for tcpwrapers installed |
|
Feb 4 |
comment |
run shell command as other user called by PHP Hmm I dont know weather PHP sanitizes PATH so maybe you should give full pathname to sudo, command. |
|
Feb 1 |
comment |
Q: Howto Drop inbound traffic to port 80 (http) from source ports less than 1024? so your full command "hping2 192.168.7.100 -S -p 80 -s 123 --keep" |
|
Feb 1 |
comment |
Q: Howto Drop inbound traffic to port 80 (http) from source ports less than 1024? From hping man page "hping2 uses source port in order to guess replies sequence number. It starts with a base source port number, and increase this number for each packet sent." AND "If you need that source port not be increased for each sent packet use the -k --keep option. " So you should add switch '--keep' to your command |
|
Feb 1 |
comment |
Q: Howto Drop inbound traffic to port 80 (http) from source ports less than 1024? Ok, how are you "seeing packets"? because tcpdump (and similar programs based on libpcap) get raw data before, netfilter code, so you would even see packets that will later be dropped |
|
Feb 1 |
comment |
Q: Howto Drop inbound traffic to port 80 (http) from source ports less than 1024? ok just to clarify, how are you seeing packets?, because if you use tcpdump or similar, you will see packets before they are dropped by firewall |
