View Single Post
Old 04-27-2014, 09:14 AM   #9
knc1
Going Viral
knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.
 
knc1's Avatar
 
Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
Quote:
Originally Posted by alberiv View Post

- - - -

What I would like to know ultimately is if I can block registration, updates and bbb in one shot by simply adding some firewall rules.
Short answer: In general, yes.

Longer answer:
The firmware for the Kindles is missing many of the iptable modules you would want to use.

For instance my using the "drop" target when the "reject" target would be much more appropriate (no time-out waits done by sender).
The "reject" target module is one that wasn't included with the Kindle builds.
Duh. . . . .
Thanks to Lab126, again.

I did build (nearly complete) sets of iptable modules for the common most Kindle kernels (at the time I built them).

There is a set of them attached to one of my threads somewhere here.

And more information about the process in a public repo.
(My Internet connection is semi-dead at the moment, I will add links once I can check them.)
knc1 is offline   Reply With Quote