Date: Sat, 01 May 1999 02:25:36 +0300 From: Fadi Sodah <sodah@qatar.net.qa> To: freebsd-isp@FreeBSD.org, freebsd-net@FreeBSD.org Subject: Best firewall configuration Message-ID: <372A3BF0.B46F1607@qatar.net.qa>
next in thread | raw e-mail | index | archive | help
Greetings
What is the best firewall configuration to make smurf
and ICMPs attack useless ?
I'm runing an IRC server and would like to protect it
as much as I can from all possible attacks.
My ISP is offering a service, which will allow me to create any type of
Packet Filtering policy I require for my aloccated server. The Firewall
"Officers" sit between my server and the ISP backbone network. These
Officers have full packet filtering capability and can filter on any
protocol or IP address.
My ISP asked me to tell them what exactly do I need and they
gave me this example:-
"List the IP Addresses to be configured for Packet Filtering Services
and
indicate the Policy Line for each.
You may have multiple policy lines per IP Address. Attach a separate
piece of
paper if necessary."
FROM: TO:
Allow or Deny IP Address or Block IP Address
or
Block Port or Application
Example Allow Any
206.171.12.100
ICMP
Example Deny Any
206.171.12.32/27
ICMP
Thanks in advance
-Pons
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?372A3BF0.B46F1607>