[Gllug] [OT] Netgear DG834 and DOS attacks
chrisbell at overview.demon.co.uk
Wed Jul 20 11:43:28 UTC 2005
On Wed 20 Jul, Wiehe, Simon wrote:
> > doesn't the web interface let you block whole
> > domains, perhaps it would do the right thing if you put put in an ip
> > address instead?
> The domain blocking looks to be outbound only, not traffic coming from
> that domain. It means I can stop my son surfing for porn but not stop
> DOS from a remote site.
You can include the source and destination IP address ranges, input and
output interfaces, port number, service type, etc. Plenty of other info in
The Linux Documentation Project, NetFilter, man page, etc. Similar rules
exist for the ethernet bridge, see ebtables.
Gllug mailing list - Gllug at gllug.org.uk
More information about the GLLUG