use ipchains block ports

hi there ,

I'm not familiar with linux firewall .
I tried to block port 6891 thru 6900 to disable msn messenger file
transfer.


following is the result of my linux ipchain -L :


Chain input (policy ACCEPT):
target prot opt source destination
ports
DENY tcp ------ anywhere anywhere
any -> 6891:6900
ACCEPT all ---f-- anywhere anywhere
n/
a
acctin all ------ anywhere anywhere
n/
a
acctboth all ------ anywhere anywhere
n/
a
inp all ------ anywhere anywhere
n/
a
Chain forward (policy DENY):
target prot opt source destination
ports
DENY tcp ------ anywhere anywhere
any -> 6891:6900
ACCEPT all ---f-- anywhere anywhere
n/
a
fwd all ------ anywhere anywhere
n/
a
Chain output (policy ACCEPT):
target prot opt source destination
ports
DENY tcp ------ anywhere anywhere
any -> 6891:6900
ACCEPT all ---f-- anywhere anywhere
n/
a
acctout all ------ anywhere anywhere
n/
a
acctboth all ------ anywhere anywhere
n/
a
out all ------ anywhere anywhere
n/
a
Chain acctin (1 references):
Chain acctout (1 references):
Chain acctboth (2 references):
Chain inp (1 references):
Chain out (1 references):
Chain fwd (1 references):
target prot opt source destination
ports
DENY udp ------ anywhere anywhere
any -> 6891:6900
DENY tcp ------ anywhere anywhere
any -> 6891:6900
DENY tcp ------ anywhere anywhere
any -> 6891:6900
DENY tcp ------ xxx.xxx.xxx.0/24 anywhere
any -> 6891:6900
DENY tcp ------ anywhere xxx.xxx.xxx.0/24
any -> 6891:6900
MASQ all ------ xxx.xxx.xxx.0/24 anywhere
n/
a
MASQ all ------ anywhere xxx.xxx.xxx.0/24
n/
a
MASQ all ------ xxx.xxx.xxx.0/24 anywhere
n/
a
MASQ all ------ anywhere xxx.xxx.xxx.0/24
n/
a

where xxx.xxx.xxx.0 is my ip address.

can anyone help me to block port 6891 thru 6900?
I tried and tried , but it just won't work?


please show me the right rule to block these ports.


any message from you will be appreciated.


tks .

Re: use ipchains block ports

On Sun, 02 Sep 2007, in the Usenet newsgroup comp.security.firewalls, in article
<1188739568.955815.100450@o80g2000hse.googlegroups.com>, pamela_tw@yahoo.com
wrote:

NOTE: Posting from groups.google.com (or some web-forums) dramatically
reduces the chance of your post being seen. Find a real news server.

>I'm not familiar with linux firewall .
> I tried to block port 6891 thru 6900 to disable msn messenger file
>transfer.

Is there any reason you are ignoring the responses to your previous posts
in news://comp.os.linux.networking ?

use ipchains to block msn messenger Thu, 30 Aug 2007 02:33:16
use ipchains to block msn messenger Thu, 30 Aug 2007 02:33:18
Re: use ipchains to block msn messenger Thu, 30 Aug 2007 10:29:32
Re: use ipchains to block msn messenger Thu, 30 Aug 2007 15:01:08
use ipchains to block ports Fri, 31 Aug 2007 21:43:15
use ipchains to block ports Fri, 31 Aug 2007 21:43:19

Maybe if you used a real news reader and a real news server, you wouldn't
have problems missing posts.

Old guy