I have a Plesk server online. I have the firewall turned on, but I need to tighten up the rules. I have to add some rules to protect against ip spoofing. I suppose I probably need ingress and engress filtering.

Can someone tell me exactly what rules I need on a web server to do this?

Hello,

What firewall are you using? Is your plesk running under windows?

I am running linux and plesk 9.x. I figured out I was probably not spoofed, but I wan't to add that to the firewall.

Hello,

You might want to check this out for you to add in iptables anti-spoofing rule:

http://www.fwbuilder.org/4.0/docs/us...ing-rules.html

Just changed the IP accordingly to your LAN.

This one I'm using on my FW:

### anti-spoofing rules
$IPTABLES -A FORWARD -i eth1 -s ! $INT_NET -j LOG --log-prefix "SPOOFED PKT "
$IPTABLES -A FORWARD -i eth1 -s ! $INT_NET -j DROP

Thanks!