Linux Forums unreachable.

Tom H tomh0665 at gmail.com
Thu Feb 25 18:33:58 UTC 2010


>>> What is the output of sudo iptables-save

>> $ sudo iptables-save
>> -A INBOUND -s 192.168.0.2 -j ACCEPT
>> -A INBOUND -s 174.129.35.126 -j ACCEPT
>> -A INBOUND -s 174.129.35.126 -p tcp -m tcp --dport 38009 -j ACCEPT
>> -A INBOUND -j LSI

> What are the immediately above inbound connections about??? I thought I
> had my computer locked down to where there were no inbound connections
> allowed???

192.168.0.2 must be a box on your network
174.129.35.126 is pricewatch

>> -A NR -s 174.0.0.0/255.0.0.0 -d 192.168.0.0/255.255.255.0 -i eth0 -j LSI

I have just removed my rules and installed firestarter with
"restrictive as default" and it did not create this 174 rule but it
did create a long list of bogon and other rules.

Looking through some iptables docs that I have it seems incorrect. It should be
174.0.0.0/7
and not
174.0.0.0/8

But even my docs seem to be wrong. I did some googling and found
http://www.bgp-and-beyond.com/index.php?/archives/10-BOGONs-should-be-updated-every-now-and-then-....html

This seems to be the latest list
http://www.cymru.com/Documents/bogon-bn-agg.txt




More information about the ubuntu-users mailing list