From: Julien Vehent <julien@linuxwall.info>
To: netfilter <netfilter@vger.kernel.org>
Subject: Re: Netfilter and Iptables talk at AWeber
Date: Thu, 02 Aug 2012 12:01:20 -0400 [thread overview]
Message-ID: <db887c8d7eef2e925dec079c0601b4e5@linuxwall.info> (raw)
In-Reply-To: <alpine.LNX.2.01.1208021742120.10019@frira.zrqbmnf.qr>
On 2012-08-02 11:46, Jan Engelhardt wrote:
> On Wednesday 2012-08-01 23:34, julien wrote:
>>
>>I figured it would of interest to this list. I am also curious to get
>>feedback from the community, as I will be holding a Netfilter workshop
>>at Fosscon Philadelphia on August 11th. So if you have any comment,
>>please reply here, or to me directly.
>>
>>http://jve.linuxwall.info/blog/index.php?post/2012/08/01/Netfilter-and-Iptables-talk-at-AWeber
>
> For geoip blocking, there is also -m geoip from Xtables-addons.
>
I was more interested in ipset than I was in geoip. The latest is on my todo
list though.
> AFW is not using -m conntrack though you used it earlier.
>
I need to make that change, and open source AFW. That's in the pipe.
>
> And a big grin for the christmas example.
There shall be no talk without cat. That's an AWeber motto :)
But I'm really considering that type of rule for some systems. Keep a ssh
relay accessible at all time, but block direct SSH on servers themselves at
night.
- Julien
prev parent reply other threads:[~2012-08-02 16:01 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-08-01 21:34 Netfilter and Iptables talk at AWeber julien
2012-08-02 15:46 ` Jan Engelhardt
2012-08-02 16:01 ` Julien Vehent [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=db887c8d7eef2e925dec079c0601b4e5@linuxwall.info \
--to=julien@linuxwall.info \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.