From mboxrd@z Thu Jan 1 00:00:00 1970 From: Eric Leblond Subject: doc: Secure use of iptables and connection tracking helpers Date: Mon, 28 Nov 2011 18:32:56 +0100 Message-ID: <1322501576.20587.22.camel@tiger.regit.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="=-t2oDdGfMnTCENe8udyp2" Cc: netfilter-devel@vger.kernel.org, pablo@netfilter.org, kaber@trash.net To: netfilter@vger.kernel.org Return-path: Sender: netfilter-owner@vger.kernel.org List-Id: netfilter-devel.vger.kernel.org --=-t2oDdGfMnTCENe8udyp2 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello, Pablo Neira Ayuso, Patrick McHardy and I have worked on a document we've called "Secure use of iptables and connection tracking helpers". This is a guide describing how to use securely the connection tracking helpers. This is a recommended reading for all Netfilter/Iptables users. HTML version: http://home.regit.org/netfilter-en/secure-use-of-helpers/ PDF version: http://home.regit.org/wp-content/uploads/2011/11/helper-recommandation.pdf BR, --=20 Eric Leblond=20 Blog: http://home.regit.org/ --=-t2oDdGfMnTCENe8udyp2 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEABECAAYFAk7TxcgACgkQnxA7CdMWjzLIWQCeJ5DbcJdD9DRpibuMBihqVaao pWoAn2vTciVPomP00RxxS1GJ9NbZBdll =05Gv -----END PGP SIGNATURE----- --=-t2oDdGfMnTCENe8udyp2--