Salix Forums

Code: Select all

IPT=/usr/sbin/iptables


 $IPT -t filter -F
 $IPT -t filter -X
 $IPT -t filter -Z
 $IPT -t filter -P INPUT DROP
 $IPT -t filter -P FORWARD DROP
 $IPT -t filter -P OUTPUT DROP

 /bin/echo "1" > /proc/sys/net/ipv4/ip_forward
 /bin/echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
 /bin/echo "1" > /proc/sys/net/ipv4/conf/all/rp_filter
 /bin/echo "0" > /proc/sys/net/ipv4/conf/all/accept_redirects
 /bin/echo "1" > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
 /bin/echo "1" > /proc/sys/net/ipv4/conf/all/log_martians
 /bin/echo '1' > /proc/sys/net/ipv4/tcp_syncookies
 /bin/echo '0' > /proc/sys/net/ipv4/conf/all/accept_source_route

 $IPT -t filter -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
 $IPT -t filter -A OUTPUT -m state --state ESTABLISHED,RELATED,NEW -j ACCEPT
 $IPT -t filter -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

 #SAMBA
 $IPT -t filter -A INPUT -p tcp --dport 139 -j ACCEPT
 $IPT -t filter -A INPUT -p tcp --dport 445 -j ACCEPT

Code: Select all

nslookup <hostname>

Code: Select all

nslookup maggie
Server:         8.8.8.8
Address:        8.8.8.8#53

** server can't find maggie: NXDOMAIN

Code: Select all

#
# hosts         This file describes a number of hostname-to-address
#               mappings for the TCP/IP subsystem.  It is mostly
#               used at boot time, when no name servers are running.
#               On small systems, this file can be used instead of a
#               "named" name server.  Just add the names, addresses
#               and any aliases to this file...
#
# By the way, Arnt Gulbrandsen <agulbra@nvg.unit.no> says that 127.0.0.1
# should NEVER be named with the name of the machine.  It causes problems
# for some (stupid) programs, irc and reputedly talk. :^)
#

# For loopbacking.
127.0.0.1               localhost
127.0.1.1               maggie
10.5.1.20               maggie.localdomain maggie

# End of hosts.