[Shorewall-users] Question on REJECT

Brian Fallik baf11@cornell.edu
Thu, 11 Apr 2002 21:40:51 -0400


To all,

Sorry for this question if it's already answered in the list archives but
they seem to be down right now.

Is it possible to configure shorewall to reject packets so that portscans
will not work?

Something like:
http://groups.google.com/groups?hl=en&safe=off&selm=fa.hbgphmv.sma38m%40ifi.
uio.no

Even though packets are dropped, I'd like to disable any potential views
into my firewall/gateway since it is running services for my internal LAN.

Please CC me in the reply since I'm not on this distribution list.

Thanks,
brian