Arch Linux

imatechguy

Arch Linux f@h Team Member

Registered: 2010-03-22

Posts: 66

Potential errors on Simple Stateful Firewall Wiki page?

Reading through the Simple Stateful Firewall Wiki page I think I see a few errors.  I'm willing to make the changes myself but before I do and end up creating a real error I'd like some confirmation from folks more familiar with iptables than I am.

I think the first errors are that the wiki page indicates this

iptables -N TCP
iptables -N UDP

I think it should really be

iptables -N OPEN-TCP
iptables -N OPEN-UDP

The other error I think I see is this

iptables -A INPUT -p icmp --icmp-type echo-request -m recent --name ping_limiter --hitcount 6 --seconds 4 -j DROP

I think that one should be

iptables -A INPUT -p icmp --icmp-type echo-request -m recent --name ping_limiter --update --hitcount 6 --seconds 4 -j DROP

Thanks.

Last edited by imatechguy (2011-10-21 03:45:13)