Collaborate Disseminate
I block most everything with my firewall, what I don’t get is why would I constantly receive hits to connect on random ports from port 443.
[iptables] reject_ipv6: IN=eno1 OUT= MAC=…
SRC=2607:f8b0:4005:0805:0000:0000:… Continue reading Why am I receiving hits with SPT=443 on IPv6?
I’m not trained in Linux, but I think I found the solution to my problem documented, but it is not working as expected. I am NOT an iptables guru, I’m learning as I go.
A Russian IP is trying to hack my network, especially an email serve… Continue reading How to block all inbound traffic from a specific Internet address or subnet using TomatoUSB router software (LINUX based)
Even though my firewall is active, is it protecting me fully given that the ‘rules’ are not active?
Output shows:
host based firewall active, empty rules
iptables modules loaded, but no rules active
Maybe I should mention… Continue reading Even though my firewall is active, is it protecting me fully given that the ‘rules’ are not active?
Is it ok for a native linux vpn application (from a famous brand among the vpn providers) changing your iptables ruleset each time the vpn activated?
Consider that one of the rules which always changes after running the vpn … Continue reading Iptables ruleset changes when running a native vpn application
My server currrently has very strict fail2ban rules, which permanently and persistently ban any ip that fails to login once on all ports.
This might seem overkill, but most ports are “private” ports (meaning only I should acc… Continue reading Fail2ban: Ban ip on all ports exept HTTP[S] (or group of ports)
Nodes h1 to h10 have an IP address of 10.0.0.x (hx-eth0), where x = 1 to 10. Each of them also has a loopback interface.
I’m trying to run honeyd on h1 such that when an adversary scans 10.0.0.1, nmap will show the honeyd … Continue reading honeyd, iptables, routes – Using an existing IP address?
I would like to know in simple terms how a routing table is structured and used?
Continue reading How a routing table is structured and used? [on hold]
If I have an open port on a firewall it means that I can receive traffic on that port. If it’s unencrypted I assume that the raw data is just allowed through.
If TLS is being used, does firewall decrypt the traffic before re… Continue reading How does TLS traffic impact firewalls?
I have a mail server which I’d like to secure by only allowing OUTBOUND connections on the various ports it uses. The inbound rules are working fine – they are handled by the VM host.
I’ve not been able to find out much abou… Continue reading What’s wrong with this outbound iptables firewall? [migrated]
Specifically I am working on a security product for ISP’s that has a custom policy engine per individual Router, but in theory this should run on a Router from any Manufacturer.
Considering each Manufacturer (TP-Link, Action… Continue reading How to deploy a Dynamic Policy Engine on a Consumer Router by any Manufacturer?