Messages in this thread | | | Subject | Re: [PATCH v2] add stealth mode | From | Valdis.Kletnieks@vt ... | Date | Mon, 06 Jul 2015 06:49:58 -0400 |
| |
On Thu, 02 Jul 2015 10:56:01 +0200, Matteo Croce said: > Add option to disable any reply not related to a listening socket, > like RST/ACK for TCP and ICMP Port-Unreachable for UDP. > Also disables ICMP replies to echo request and timestamp. > The stealth mode can be enabled selectively for a single interface.
A few notes.....
1) Do you have an actual use case where an iptables '-j DROP' isn't usable?
2) You *do* realize that this isn't anywhere near sufficient in order to actually make your machine "invisible", right? (Hint: What *other* packets can be sent to a machine to provoke a response?)
3) At least my copy had massive whitespace damage, where all the tab characters appear to have evaporated.... [unhandled content-type:application/pgp-signature] | |