Enhanced Rules Set

Discussion in 'LnS English Forum' started by nuser, Jun 1, 2007.

Thread Status:
Not open for further replies.
  1. nuser

    nuser Registered Member

    Joined:
    May 31, 2007
    Posts:
    105
    Location:
    Singapore
    Hi, all,
    In the 'enhanced rules set", the first rule is 'block TCP packets with FIN flag' and the 8th rules is 'Block incoming packets with SYN flag'.

    The difference is that the option 'Block incoming connections' is NOT checked in the 1st case, while checked in the 2nd case.

    My question is: what is the real difference if I check or uncheck the option "Block incoming connections", since the direction is already chosen as 'inbounds'?
    o_O
     
  2. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,640
    Hi nuser :)

    There's a big difference: The rule 1 block TCP packets with the flag FIN
    the rule 8 block the packet with the flag SYN. If you read the LNS documentation it's stated there that only one rule must have the option
    to block connections checked.

    When you check this option this change automaticaly the masks and activ flag to SYN...

    :)
     
  3. nuser

    nuser Registered Member

    Joined:
    May 31, 2007
    Posts:
    105
    Location:
    Singapore
    thanks, Climenole:p
    I am still a little confused.:oops:
    If I uncheck the 'block incoming connections" and then check the appropriate options in the "More" dialog ('mask' for all, 'SYN' for "set/clear").
    Will this have a different effect?o_O
    Also, I check this option and find that it does NOT change automaticaly the masks and activ flag to SYN...
     
  4. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,640
    Hi nuser :)


    When you check the option it sets the mask/activ to the correct combination to block packets with the SYN flag. You don't have to do it manually.

    If you set the rule without the option checked and the right combination the effect is the same...

    Keep it simple and check the option... ;)


    Typical application of the "Réaumur-Sébastopol's Theorem":

    "Plus un informaticien est fainéant, meilleur il est,
    Car il connait des tas d'astuces!"

    "More one informatician is lazy, better it is,
    Because it know heaps of easy ways!

    :)
     
  5. nuser

    nuser Registered Member

    Joined:
    May 31, 2007
    Posts:
    105
    Location:
    Singapore
    :thumb:
    So, the "block incoming connections' is equal to "mark 'all', Set 'SYN':-*

    Seems this option is not really necessary.:cautious:

    btw, is LNS written in VC++? An incredible file size (800K!)
     
  6. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,640
    Hi nuser :)

    May be the option is needed for lazzy poeples ... ;)

    I guess LNS is written in C++ but you have to confirm this with Frédéric, the developper of LNS.

    Have fun !

    :D
     
  7. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,354
    Location:
    France
    Yes, VC++, and 150 Kbytes for the bitmap on the welcome page.

    Frederic
     
  8. nuser

    nuser Registered Member

    Joined:
    May 31, 2007
    Posts:
    105
    Location:
    Singapore
    Frederic:thumb:
    You must be a code genius!

    btw, are you the only developer of LnS? If someday, you are tired of LnS, will this project die?
     
Thread Status:
Not open for further replies.