Shorewall users - Nov 2002 - Some ports still open?

Hell,

I like shorewall, I''ve had to tweak my Mandrake 9.0 install, but using
your example files it now works. I went to www.grc.com to test it with
shileds up, most came up stealth, except 113 and 135 (I think), how do I
close all ports (stealth/drop)?

Cheers

--On Monday, November 11, 2002 04:05:42 PM +1000 Damian Cross 
<firephox@tpg.com.au> wrote:
> Hell,
>
> I like shorewall, I''ve had to tweak my Mandrake 9.0 install, but
using
> your example files it now works. I went to www.grc.com to test it with
> shileds up, most came up stealth, except 113 and 135 (I think), how do I
> close all ports (stealth/drop)?
>
You probably DON''T want to stealth port 113 -- if you do then you will
be
posting tomorrow complaining that you are timing out connecting to some FTP 
sites (see FAQ #4). If you want to close port 135, then simply include this 
in your rules file:

DROP	net	fw	tcp	135

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://shorewall.sf.net
ICQ: #60745924  \ teastep@shorewall.net