Collaborate Disseminate
I recently set up a computer(X86) as a router for my small office; it’s based on Devuan4(Debian) using iptables/pihole.
I set up my iptables such that any input that is "unexpected" is being logged:
***nat
:PREROUTING ACCEPT [0:0… Continue reading iptable rules efficiency/performance [closed]
I am writing the iplock tool to help me setup my Linux firewall. For the most part, my current strategy, since I don’t yet use IPv6 much, is to pretty block everything IPv6 ("simple").
I would like to switch all my public facing … Continue reading Do I have to block IPv4-mapped IP addresses in my IPv6 firewall?
I have problem on my nethunter device with iptables (version 1.6).
I have created flask server (http port 80) and script that create ap using hostapd
For redirection I use dnsmasq (10.0.0.1 address)
dnsmasq conf:
interface=wlan1
dhcp-range… Continue reading Setting iptables for captive portal ap
[Zak Kemble] likes to build things, and for several years has been pining over various Raspberry Pi products with an eye on putting them into service as a router. Sadly, …read more Continue reading Meet the RouterPi, a Compute Module 4 Based GbE Router
I am quite new to UFW and IpTables and I am trying to understand what kind of rules we should look to implement to keep a web-application secure. The current scenario I am testing myself in is that I am writing rules for an application lik… Continue reading Writing effective UFW & IpTable rules
I am trying to better understand measures that can be used to protect a web-application. I’m trying to determine which would be more effective, implementing a UFW or using IpTables.
From my perspective, they are both as effective as each o… Continue reading UFW vs IpTables for web application security
Are there any legitimate circumstances under which TCP SYN+ACK packets would arrive at a Linux firewall’s INPUT chain, if it did not leave via the OUTPUT chain?
That is, am I correct in assuming that NATed or FORWARDed (routed) traffic c… Continue reading TCP SYN/ACK on INPUT vs FORWARD
Does the Linux Kernel include a firewall in its monolith? Is it netfilter, iptables, nftables, or firewalld? How all these components interact between them?
Continue reading What’s difference between netfilter, iptables, nftables, and firewalld? [closed]
I am trying to "enforce" IPSec (StrongSwan) traffic on openSUSE.
On OpenBSD, with the IKE daemon iked and the packet filter pf, I employ a ruleset like the following, to ensure only encapsulated traffic passes the interface, prac… Continue reading firewalld: Block non-ESP packets on interface in GNU/Linux similar to OpenBSD
I am trying to "enforce" IPSec (StrongSwan) traffic on openSUSE.
On OpenBSD, with the IKE daemon iked and the packet filter pf, I employ a ruleset like the following, to ensure only encapsulated traffic passes the interface, prac… Continue reading firewalld: Block non-ESP packets on interface in GNU/Linux similar to OpenBSD