Re: [44net] Security - Nested IPIP

For those who use it as I do in my JNOS autoexec.nos, "tcp access" permit and deny are useful for weeding out who is allowed on my system. The "all" at the end of each line is for port number/range. tcp access permit 44.0/9 all <----- needed after ARDC sale tcp access permit 44.128/10 all <----- needed after ARDC sale tcp access permit x.x.x.x all <----- any trusted public IP address tcp access permit x.x.x/24 all <----- any trusted public IP subnet tcp access deny 1/1 all <----- make sure all others are dropped tcp access deny 128/1 all <----- make sure all others are dropped -- Charles J. Hargrove - N2NOV NYC-ARECS/RACES Citywide Radio Officer/Skywarn Coord. NYC-ARECS/RACES Nets 441.100/136.5 PL ARnewsline Broadcast Mon. @ 8:00PM NYC-ARECS Weekly Net Mon. @ 8:30PM http://www.nyc-arecs.org NY-NBEMS Net Saturdays @ 10AM & USeast-NBEMS Net Wednesdays @ 7PM on 7.036 Mhz USB (alt 3.536)/1500 hz waterfall spot; MFSK-16 or 32 "Information is the oxygen of the modern age. It seeps through the walls topped by barbed wire, it wafts across the electrified borders." - Ronald Reagan "The more corrupt the state, the more it legislates." - Tacitus "Molann an obair an fear" - Irish Saying (The work praises the man.) "No matter how big and powerful government gets, and the many services it provides, it can never take the place of volunteers." - Ronald Reagan