Re: [SLUG] ipchains stuff

[Anand Kumria <wildfire@nospam.progsoc.uts.edu.au>]

On Sat, Jun 17, 2000 at 11:50:26PM +1000, Chuck Dale wrote:
> > you might want to 'ipchains -A -s 0/0 -d 0/0 -j DENY -l' at the end of
> > each new define to catch what's left over. 
> 
> ipchains -P chain DENY 

That only works for inbuilt chains;

ipchains -A <chain> -j DENY -l

is better (or without logging `-l').

Anand
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to slug-request@nospam.slug.org.au with
unsubscribe in the text