Forum Moderators: open

Message Too Old, No Replies

Testing and optimising help?

my new firewall

         

snowman

7:41 pm on Dec 17, 2003 (gmt 0)

10+ Year Member



This may be in the wrong forum - I'm not sure.

After 6 months of escalating DoS attacks getting worse and worse (which I mistook for a hardware problem) I think I've finally got it licked.

At times it was to the point where I couldn't be on-line for 5 minutes without being "pinged" and "probed" to death, in large waves.

My ISPs poorly written PPPoE-equivalent software couldn't handle it and would freeze the system whenever this happened. During writing this note, it would have been kicked off already.

Today I finally replaced my software firewall (Norton firewall) and put a hardware router/firewall between my Mac and my DSL modem.

:) :) :)

According to grc.com, it's not too badly configured. Everything except port 113 (i think that's it) comes up as stealth. But I'd like to know and understand more about how this works and what I can do to make it runs best as possible.

Does anybody have any tips on this? It's all new to me.

It's a "D-Link" DI-604 and it's running the most recent firmware revision (V3.20).

macrost

3:39 pm on Dec 18, 2003 (gmt 0)

10+ Year Member



Snowman,
Read some of this, it might help you.
http*//www.mail-archive.com/focus-linux@securityfocus.com/msg00633.html

snowman

4:11 pm on Dec 18, 2003 (gmt 0)

10+ Year Member



Thanks!

smellystudent

1:18 pm on Dec 19, 2003 (gmt 0)

10+ Year Member



The waves of traffic are most likely caused by the latest worms doing the rounds. They're not going to infect your Mac, but they will ping it to death :-)

Port 113 is ICMP (ping), and there's no harm in having it open, it just means that the router will respond to a ping request.

If you ever need to host anything behind the firewall, you will need to open ports. The common ones are:
FTP: 21
SMTP: 25
HTTP: 80