Lets tray and be clear here. You have some ports you want to block - well thats easy with your firewall. Just block them. It doesnt matter at all that some of the blocked ports are near to assigned ones.
hm, would not call that proper style. Okay, 1214 is far away from 1024, but think of 189 open sessions (I wonder, if that might happen, but nevertheless). Now a process at the firewall wants to open an other session -- using port 1214. It would get no response (they will get kicked out by the firewall) -- and die with some connection:impossible error.
Problem would be solved, if ports blocked by IPCHAINS/IPTABLES will not dynamically assigned by the system (but I doubt that). |
