3t$1@xivic.prima.de   
   From: Wolfgang.Schelongowski@gmx.de   
      
   Moe Trin  writes:   
      
   >On Wed, 19 Dec 2012, in the Usenet newsgroup alt.os.linux.mandriva, in article   
   >, Adam wrote:   
      
   >>Yeah, I need to learn more about software firewalls.   
   >   
   >Ours are pretty simple:   
   >   
   >   accept anywhere state RELATED,ESTABLISHED   
   >   accept $LAN_RANGE state NEW tcp dpt:ssh   
   >   accept all 127.0.0.0/8   
   >   reject all anywhere reject-with icmp-host-prohibited   
      
   No holes for $LAN_RANGE domain, $DHCP, $NTP, ...?   
   --   
   The first entry of Sin into the mind occurs when, out of cowardice or   
   conformity or vanity, the Real is replaced by a comforting lie.   
     -- Integritas, Consonantia, Claritas   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)