Collaborate Disseminate
This is what I have so far but it is pretty open.
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
-A INPUT -p ipv6-icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A OUTPUT -p ipv6-icmp -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPU… Continue reading What is the most restrictive way to allow IPv6 ICMP requests on iptables?
Using iptables, how do I drop an entire subnet that I am connected to, except for the gateway, in a manner that still allows me to retain my connectivity to it?
I’m looking for two iptables rules, one for just incoming, and another for out… Continue reading How to block entire subnets except their gateways with iptables? [migrated]
I have a host with different bridges and a daemon not only to listening on a certain IP, but it is also attached to the bridge. I would like to communicate with this daemon with traffic coming from another bridge/an interface not part of … Continue reading Can iptables or route be used to eg double-DNAT so traffic appears to be from a different bridge?
I have a Java App running, which prints out messages into STDOUT and also has an active interactive console (also accepts STDIN), when the server has started up.
How do I securely give access to an external person (outside the network) to… Continue reading How do you securely give access to a Java App interactive console (Linux/GNU)?
I use lynis to check my system using the following script:
#!/bin/sh
#lynis.sh
#Global Variables
REPORT_FILE_FINAL=”/tmp/lynis-report-final.log”
MYHOSTNAME=`/bin/hostname`
LYNIS_BIN=”/usr/local/lynis/./lynis”
MAIL_BIN=”/usr/local/bin/mai… Continue reading Lynis weird error message. How to get rid of it
My network: 192.168.0.1 server. (enp0s3 NAT, enp0s8 internal) 192.168.0.10-15 clients (enp0s3 internal).
I have a proxysquid for blocking websites,and so on.
My clients can navigate and browse any website if no proxy is set at firefox se… Continue reading iptables: force clients to use proxy
I have a virtual environment and I am making a SYN flood attack to a Ubuntu Server’s port 53 using Kali 2020.
I realized that a countermeasure for this attack is to limit or block the responses to the SYN packets, which are the SYN,ACK.
I have a virtual environment and I am making a SYN flood attack to a Ubuntu Server’s port 53 using Kali 2020.
I realized that a countermeasure for this attack is to limit or block the responses to the SYN packets, which are the SYN,ACK.
my main goal is to setup iptables that work as a VPN killswitch for my openvpn connection. Thanks to a post from forest, this was pretty straight forward: OpenVPN kill switch on Linux . So. everything that is not going to TUN1 should be bl… Continue reading smb iptables configuration not working with vpn killswitch
How can I change rule on iptables on my router from
Chain ipfilter (1 references)
target prot opt source destination
DROP all — anywhere anywhere destination IP range 10.0.0.1-10…. Continue reading How to change rule on ipfilter [migrated]