INPUT chain

[Subba Rao]

My INPUT chain has the ACCEPT policy, on my linux gateway. This system has
2 interfaces. One is a modem interface (Internet) and the other is a ethernet interface (Intranet).

EXERCISE

For the modem interface, I setup the following rules,

$ ipchains -A input -i ppp0 -p 21 -j DENY
$ ipchains -A input -i ppp0 -p 23 -j DENY
$ ipchains -A input -i ppp0 -p 80 -j DENY

My goal in this exercise is to prevent outside telnet, ftp and www access
to my gateway.

RESULTS

>From a remote machine(from a different LAN on the Intranet), I can still access these service.

What is wrong with the above rules? What am I doing wrong?

Thanks you in advance for your input.

Subba Rao
subb3 at ibm.net
==============================================================
Disclaimer - I question and speak for myself.

http://pws.prserv.net/truemax/
______________________________________________________________



-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).