Do you have a question? Post it now! No Registration Necessary. Now with pictures!
- Posted on
June 23, 2005, 4:00 pm
rate this thread
another box to make sure PortSentry was working. As expected, both the
/etc/hosts.deny file and the routing table got updated. Now I want to undo the
changes that PortSentry did. That's an easy edit of the hosts.deny file, but
fixing the routing table baffles me. Here's the routing table:
Destination Gateway Genmask Flags Metric Ref Use Iface
188.8.131.52 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
184.108.40.206 - 255.255.255.255 !H 0 - 0 -
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
0.0.0.0 220.127.116.11 0.0.0.0 UG 0 0 0 ppp0
Question: How does one flush the line that has the flag "!H"? TIA...
Re: PortSentry: How To Delete an Entry in Routing Table
From the configuration file, /etc/portsentry.conf, PortSentry performs this
command when it detects a scan:
route add -host 18.104.22.168 reject
Therefore, it is reasonable to assume that to restore the route, perform this:
route del -host 22.214.171.124 reject
- » Cloud Ace Technologies is offering Implementation Services on Cloud Computing, Cloud Serv...
- — Newest thread in » Linux Security