it's a bit general - firewall

[the bassinvader]

Hey everyone


Just a quick question. i've recently installed guarddog which seems to be working but
i read somewhere that it might be worth uninstalling stuff that i dont use, Telnet .etc
Is it worth doing this seeing as my ports are stealthed anyway?

[Juan Pablo]

There's no risk if the services are not running

[burntfuse]

Right, unless someone manages to break into your box some other way and start telnet to use as a backdoor, but that's pretty unlikely.

[the bassinvader]

Thanks for the frank answears!

One more thing though...



I need a little help with disabling my ping response. I'm using guarddog but I can't find a way to stop
my system from responding to a ping. I've tried this code;

echo 1>/proc/sys/net/ipv4/icmp_echo_ignore_all

but it seems to have no effect.

Any ideas?

[Juan Pablo]

You are missing a couple of spaces
echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all

It worked for me

[the bassinvader]

Thanx

those pesky spaces make you wanna cry sometimes

later

[the bassinvader]

The only problem now seens to be that i have to redo it every time i reboot, otherwise my user account will respond to pings again!!

Any ideas

[burntfuse]

If you want it to work for all accounts, you should be able to put a script in /etc/profile.d (as root, of course):

#!/bin/bash

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all

If you're using GNOME or KDE, there should also be somewhere where you can set up a command to be run each time you log in (in GNOME, it's under Session preferences).