Iptables udp blocking issue
Iftakharul Alam asked: If I had to block port 144 for udp on eth1 in an active way, for packets with source port 8080, but block it actively so not …
iptables INPUT DROP NEW what effect will this have?
John Von Neumann asked: I’m currently working through the Linux Firewalls book and have a set of rules setup which dictate rules to follow around every STATE except for NEW …
correctly routed responses to NATed packages via OpenVPN are rejected by client
singinWhale asked: I have the following setup: Dedicated server S with static public IP address on eth0 running OpenVPN as server on tun0 and performing NAT from tun0 to eth0 …
How to update an ipset name-based entry
WoJ asked: I need to handle on my firewall (Firehol, which is then transformed into iptables) a few dynamic entries. In an ideal world I would use a name (instead …
Redirecting OpenVPN traffic to Burp Suite
Pan Ziyue asked: I have a Linux Mint VM that I spun up as a transparent proxy for iOS devices. My intention is to tunnel all traffic from the iOS …
iptable – REJECT target – not accepted as valid target
Eric asked: Platform: Linux {hostname} 3.13.0-145-generic #194-Ubuntu SMP Thu Apr 5 15:20:44 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux System is not allowing usage of REJECT as –jump target. According to …
attack from China on the mail server
Emilio Galarraga asked: What is the best way to avoid this kind of attack on the mail server? Mar 22 21:47:46 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in …
How to drop connections RELATED to other dropped connections?
elmazzun asked: Scenario: I wrote iptables rules for a host where a DPI engine is watching Netfilter queues: firewall rules enqueue traffic incoming to this host into different Netfilter queues …
binding ip addresses statically in /etc/network
user79356 asked: I have a 138.128.111.176/29 IP that is assigned to my server and the IP is 138.128.111.176, when I do the following in my /etc/network/interfaces iface p2p1 inet static …
ipv6 firewall – how do I refer to the attached network
Steve Davies asked: I am in a dual-stack IPv4/IPv6 environment behind an ISP’s router which handles all of the IPv6 setup, so the IPv6 address(es) allocated cannot be assumed to …