republican-creole
Search:  

 
theme to black backgroundlet page decide theme
HomeFind ServiceReviewsISP NewsFAQsForumsToolsDatabaseAbout 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » The Site » Old Forums » Kerio - Tiny Support » [Kerio 2.x] My Kerio 2.1.5 rules based on BZ's please critique
Search Topic:
 Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Links: ·Forum Guidelines ·Kerio/Tiny pre-3.x FAQ ·BBR Security Forum ·Security FAQ
[Kerio 2.x] Rule 'Packet to unopened port received': Permitted »
« [Kerio 4.x] How to make Kerio old approve internet related pro  
AuthorAll Replies

TheWiseGuy
Dog And Butterfly
Premium,MVM
join:2002-07-04
Yonkers, NY		reply to Lilla1
Re: [Kerio 2.x] My Kerio 2.1.5 rules based on BZ's

Try setting the Loopback rule to only allow packets OUT and see if you have any problems. I believe it should work and will allow you to block spoofed packets with a source IP of 127.0.0.1
--
Dog and Butterfly
to forum · permalink · 2004-02-22 23:15:54 · (locked)


FTLNewsFeed

join:2003-12-16
Brooklyn, NY

 Someone, I believe BZ, said that the spoof can be avoided if you specify a network/mask of 127.0.0.0/255.0.0.0 instead of the 127.0.0.1 IP addy, any way the network/mask is what I use in my rule set (UDP/TCP Both). Right now Firefox is sitting with a TCP Loopback the I believe a Out only filter would stop, haven't tested to make sure though.

FTLNewsFeed
--
"A woman never runs away, a woman never hides away in order to survive." -Ayumi Hamasaki from her song "Real Me"
to forum · permalink · 2004-02-22 23:37:24 · (locked)
Forums » The Site » Old Forums » Kerio - Tiny Support[Kerio 2.x] Rule 'Packet to unopened port received': Permitted »
« [Kerio 4.x] How to make Kerio old approve internet related pro  

Wednesday, 02-Dec 20:49:33 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [161] Comcast Releasing Promised Usage Meter
· [93] Graduate Student Unveils Sprint's GPS Sharing With Feds
· [79] Latest Consumer Reports Survey Not Kind To AT&T
· [70] Baltimore To Ban Lazy Cable Installs
· [62] Broadband Killed The Game Console
· [54] Rogers Unveils The ISP Dream Model
· [46] ACTA: Global Three Strikes
· [41] Rural Carriers Quickly Embracing Fiber
· [38] Charter Exits Chapter 11
· [38] AT&T, Verizon Drop 3G Ad Dispute
Most people now reading
· False positive in Avast! or is it real? [Security]
· MS admits Windows Updates principally created to annoy [Security]
· IMG 1.7 (IMG Updates and Discussion) [Verizon FIOS TV]
· Quality/longevity of 15A 120V receptacles [Home Repair & Improvement]
· [Newsgroups] Newzleech down? [Filesharing Software]
· 16% packet loss. damn dsl. los angeles [AT&T West]
· Poll: Have you ever been charged an overage fee since ... [TekSavvy]
· [WIN7] When exactly should you flash bios when installing new OS [Microsoft Help]
· [HD] hd updates for the Reading, Pa area [Comcast Cable TV]
· Ooma changing features [VOIP Tech Chat]