Re: stateful inspection
Ryan <[email protected]>
| Newsgroups | gmane.network.guarddog |
|---|---|
| Message-ID | <[email protected]> |
Simon Edwards wrote: > On Wednesday 09 November 2005 23:58, Ryan wrote: > >>Is there anyway to get guaarddog to configure iptables for stateful >>inspection, or is it only stateless? > > > Guarddog uses connection tracking. That is stateful. Some of the helper > modules for iptables also inspect the contents of packets. (e.g. the ftp one) > Ok, very cool. I must be confused.... When I open http on Internet and local, I open up port 80 tcp. Is there any way to only port 80 inbound for related and established TCP connections, but leave it open (completely) for outbound port 80 traffic? Great program BTW. Very nice interface. ------------------------------------------------------- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php