[FUG-BR] controle banda com ipfw

João Paulo Just jpjust em justsoft.com.br
Terça Novembro 20 23:24:04 BRST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Matheus Cadori wrote:
> #Apaga todas as regras ativas do firewall
> /sbin/ipfw -f flush
> 
> #Bloqueios de NetBios
> /sbin/ipfw add 100 deny log tcp from any to any 135
> /sbin/ipfw add 101 deny log tcp from any to any 136
> /sbin/ipfw add 102 deny log tcp from any to any 137
> /sbin/ipfw add 103 deny log tcp from any to any 138
> /sbin/ipfw add 104 deny log tcp from any to any 139
> /sbin/ipfw add 105 deny log udp from any to any 135
> /sbin/ipfw add 106 deny log udp from any to any 136
> /sbin/ipfw add 107 deny log udp from any to any 137
> /sbin/ipfw add 108 deny log udp from any to any 138
> /sbin/ipfw add 109 deny log udp from any to any 139
> /sbin/ipfw add 110 deny log tcp from any 135 to any
> /sbin/ipfw add 111 deny log tcp from any 136 to any
> /sbin/ipfw add 112 deny log tcp from any 137 to any
> /sbin/ipfw add 113 deny log tcp from any 138 to any
> /sbin/ipfw add 114 deny log tcp from any 139 to any
> /sbin/ipfw add 115 deny log udp from any 135 to any
> /sbin/ipfw add 116 deny log udp from any 136 to any
> /sbin/ipfw add 117 deny log udp from any 137 to any
> /sbin/ipfw add 118 deny log udp from any 138 to any
> /sbin/ipfw add 119 deny log udp from any 139 to any
> /sbin/ipfw add 120 deny log tcp from any to any 445
> /sbin/ipfw add 121 deny log tcp from any 445 to any
> /sbin/ipfw add 122 deny log udp from any to any 445
> /sbin/ipfw add 123 deny log udp from any 445 to any
> 
> Ai tem umas mas sao bem simples da uma olhada ve se te ajudam.

As portas 135 e 136 também fazem parte do NetBIOS?

- --
João Paulo Just
Diretor Executivo - Justsoft Informática Ltda.
http://www.justsoft.com.br/
- --
Ilhéus, BA, Brasil.
+55 75 8104 8473
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHQ4i0XL+vuN2d7ZwRAkOtAJ9HBltQUWmVUIl+KIeywpEWux9yqQCeKRpZ
lPwSmU3eakEmzCajnGLrdRc=
=cvWV
-----END PGP SIGNATURE-----


Mais detalhes sobre a lista de discussão freebsd