RE: Iptables Clues and Advices.

["Allan Schon" <allanschon () mckinleymachinery com>]

> it will also result into a mess, because the server will be a
> hole in space (regarding the blocked ports). And what are the benefits
> (if there are any) of this practice?

Well, the primary benefit is that attackers scanning for specific open ports in your ip range will never find your 
machine, if you're dropping connection attempts to the target port.  That's a considerable advantage, I think.  They 
can't attack you if they don't know you're there.  

Are there any specific disadvantages to DROPing?

-----Original Message-----
From: Andreas Happe [mailto:andreashappe () gmx net]
Sent: Saturday, April 05, 2003 5:29 PM
To: security-basics () securityfocus com
Subject: Re: Iptables Clues and Advices.


In article <1049484753.24055.41.camel () unsigned local fr>, Pierre BETOUIN wrote:
> DROP would be better there because you don't need to prevent attackers
> that this port is filtered.

it will also result into a mess, because the server will be a
hole in space (regarding the blocked ports). And what are the benefits
(if there are any) of this practice?

andreas
-- 
I tell them to turn to the study of mathematics, for it is only there 
that they might escape the lusts of the flesh.
                  -- Thomas Mann, "The Magic Mountain"


-------------------------------------------------------------------
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.securityfocus.com/SurfControl-security-basics


<b>
-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------
</b>