extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-05-28 13:57:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add blacklisting FAQ

Browse Source
This commit is contained in:
Tom Eastep 2009-04-24 11:30:53 -07:00
parent 05d1d2ab68
commit 02c53d94a7
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docs/FAQ.xml
View File

@ -763,6 +763,18 @@ DNAT loc dmz:192.168.2.4 tcp 80 - <emph
that address that is part of an established connection (such as ping
replies) is allowed.</para>
</section>
<section id="faq84">
<title>(FAQ 84) I put some IPs in the blacklist file in /etc/shorewall
to block the ips but i'm still getting reports from PSAD from those ips
saying they're port scanning. Shouldn't being on the blacklist drop all
packets from those ips?</title>
<para><emphasis role="bold">Answer</emphasis>: You probably forgot to
specify the <emphasis role="bold">blacklist</emphasis> option for your
external interface(s) in
<filename>/etc/shorewall/interfaces</filename>.</para>
</section>
</section>
<section id="MSN">