Collaborate Disseminate
I am switching to nftables and converted my old iptables rules. I would like to support IPv6 too.
I have several rules that I have added over the years from reading tutorials about security.
Several of them I either forgot or I am not sur… Continue reading Do I need to change my nftables firewall rules?
I have:
Installed Fail2ban
Created a local jail file.
Changed lines within /etc/fail2ban/jail.local where enabled is mentioned x2 to true.
Added enabled = true to the Asterisk section of the jail.local file.
Increased ban time to 1 day.
… Continue reading Fail2ban not resulting in any update of IPTables
Although Covenant’s Administrator portal by default runs on localhost port 7443 (https://127.0.0.1:7443) but it’s also accessible through the public IP of the VPS.
So to limit the access to Administrative page, I created an iptables rule t… Continue reading The C2 Listener isn’t listening when used with iptables [closed]
I have a ubuntu router set up that is leasing addresses on the LAN ETHO side from my WAN WLAN0 connection through iptables routing. I tested my device and my ETH0 network is able to ssh and ping the devices on the WAN WLAN0 connections. Wh… Continue reading Iptables Command [migrated]
I recently mapped routing output through iptables using root.
Question:
How can we analyze the iptables routing to suggest that there was an intrusion that was able to change the iptables kernel configuration?
My knowledge of iptables is … Continue reading Not the usual routing on Android
I installed hping and nmap tools for the first time. Both tools can’t connect to any website including google.com, but ping command works
Ping
[heman@Main ~]$ ping google.com
PING google.com(bom12s01-in-x0e.1e100.net (2404:6800:4009:810::2… Continue reading ping is working but hping (icmp host unreachable) and nmap (host is down) are not working for all websites [migrated]
I have the Apache error.log file that has some access attempts that generate the errors below:
AH00082
AH01630
AH02430
AH00126
Is there any way to read the error.log file every minute, find the IP that generated this error code about 5 t… Continue reading Analyze Apache Logs and block IPs for errors
I setup an IPsec ESP connection between a test laptop and an embedded device, in transport mode.
Below, i show the iptables of the embedded device.
As the rules indicate, icmp traffic is allowed, and when I do a ping from my test laptop to… Continue reading iptables shows that esp line is not used while packages are correctly processed
I want to drop all packets that do not come with a source IP in the subnets 11.2.4.0/24 and 11.2.3.0/24
I thought about doing something like so:
iptables -A OUTPUT ! -s 11.2.4.0/24,11.2.3.0/24 -j DROP
But I got the following error:
iptabl… Continue reading iptables drop all packets that do not come from two specific subnets
I found this site:
In it, the author created default rules:
# Setting default filter policy
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
But in this video @15:24, it’s mentioned that you can set a default policy… Continue reading iptables Policy Set to DROP or Create Rules to DROP?