[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

Re: [NETVAERK] Kan man vippe en fremme fugl af nettet?



Niels Elgaard Larsen wrote:
E. Sjørlund skrev:
arp -a giver fx. denne linje:
fg-in-f91.google.com (72.14.221.91) at 00:0F:23:E1:9E:70 [ether] on eth1
(det kunne have været værre, en .jp for eksempel).
Det var mystisk. Har set på trafikken?

Jeg kan lægge IP nummeret i /etc/hosts.deny, og på den måde forhåbentlig
forhindre fremtidig adgang,

Ja, men det er jo et frit opfundet IP nummer, og der er nok at vælge mellem.


men er der nogen måde at afbryde den
forbindelse her og nu?


iptables -A FORWARD   -mac 00:0F:23:E1:9E:70  -j DROP


du mangler at indlæse mac-modulet: iptables -A FORWARD -m mac --mac 00:0F:23:E1:9E:70 -j DROP

Må jeg gætte på at den omtalte mac adresse er dit modem, eller evt. hvad der nu kommer efter modem'et på vej ud mod internettet (en dims på din telefoncentral el. lign.).

Det kan passe med at mac adressen tilhører en Cisco dims, og at den kan arp resolves til forskellige internetadresser (selvom min egen maskine ikke opfører sig på samme måde).

Hvis du blokerer den mac adresse i iptables finder du jo nok ud af om det er dit modem, for så skulle al forbindelse ud til verden gerne stoppe. :-)

-Kenneth

 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2007-03-01, 02:01 CET [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *