AwPhuch


Group: Members
Posts: 1404
Joined: April 2004 |
 |
Posted: Dec. 06 2004,00:48 |
 |
Quote (Guest @ Dec. 05 2004,18:39) | rcfirewall sounds great but does it work on a machine with only 1 nic? I am only interested in blocking access to the machine, not in creating a new, protected subnet and using DSL as a NAT firewall.
Again, something akin to what the "Windows Firewall" does should be sufficient to block all inbound TCP, UDP, and ICMP packets. I see no real reason for egress filtering either in this scenario as trojans/rootkits would not persist between restarts and this is a workstation, not a bastion server.
Chip |
NO it will also create a stateful firewall on itself..which means nothing that didnt originate from the box itself is blocked!
So no traffic or requests out from box = nothing getting in!
Brian AwPhuch
-------------- http://www.frappr.com/dsl <-- Where do you use DSL? http://www.smoothwall.org <-- Ultimate firewall for the world! http://boinc.mundayweb.com/one/stats.php/userID:6107 <--My BOINC stats! ./S99LinuxRevolution start
|