Re: unrecognized item on my internal nic, how to prevent phonning home

Phil Stracchino <[email protected]> Fri, 10 Nov 2023 16:00:18 -0500
Newsgroups gmane.comp.security.shorewall
Organization Babylon Communications
Message-ID <[email protected]>
On 11/10/23 15:42, John Covici wrote:
> -----Original Message-----
> From: Phil Stracchino <[email protected]>
> Sent: Friday, November 10, 2023 1:41 PM
> To: [email protected]
> Subject: Re: [Shorewall-users] unrecognized item on my internal nic, how to prevent phonning home
> 
> On 11/10/23 11:28, John Covici wrote:
>> Hi.  I have a linux server using iptables 1.8 and shorewall version
>> 5.2.8.  I have two nics in the box, one for the outside world and an
>> internal nic for various computers.  I have two items in there which I
>> cannot identify -- even using nmap and I would like to prevent them
>> from accessing the outside.  Any way to do this with shorewall?
> 
> Something along the lines of:
> 
> REJECT		LOCALZONE:1.2.3.4	WANZONE
> 
> should do it.
> Thanks much for your quick response.  Where should I put this statement, in the rules?

Correct.
Obviously the above needs to be adjusted to match your zones and the IPs 
in question.



-- 
   Phil Stracchino
   Babylon Communications
   [email protected]
   [email protected]
   Landline: +1.603.293.8485
   Mobile:   +1.603.998.6958