deny broadcast on *.*.*.255

hi all

I use fwbuilder to create my iptables-rule-set on my debian box. Now, in my network, there are more machines with windows installed, and they send a lot of broadcast-messages to e.g. 10.0.0.255 to port 137-139. Now, my problem is, I don't want to deny all to 10.0.0.255 and above ports, because sometime I'm in any other networks (=other netaddresses, eg 192.168.1.*) but also with windows-machines.

Is there any way to define something like 0.0.0.255/0.0.0.255 rule? this one don't work. :)

Thanks for any ideas...
raphael

Well, I havnt learned myself how to set rules for iptables with commandline.
But with the webmin module its Quite easy to set no Trafic at
*.*.*.255
Maybe you should look into it.
HOpe that helped.

Well if you are never going to use Samba then you could just block those ports.

raphi078,

Lazydog is right, if your not using this linux box as a gateway, and all traffic is sourced from the local box then....

--A RH-Firewall-1-INPUT -i eth0 -p tcp -m tcp --dport 135:139 -j DROP

Bitstreamer

Quote:

---

Originally Posted by bitstreamer

raphi078,

Lazydog is right, if your not using this linux box as a gateway, and all traffic is sourced from the local box then....

--A RH-Firewall-1-INPUT -i eth0 -p tcp -m tcp --dport 135:139 -j DROP

Bitstreamer

---

Be careful with what you post. Not everyone uses RH. :)
In fact I find it stupid that RH does their firewall this way. Guess it's a RH thing. :-?

Lazydog,

I'm not using Redhat, I'm using CentOS. :mrgreen:

Seriously, my bad! Hope he got the point though.

Bitstreamer

Cool, a fellow CentOS user!! :D