Netfilter and Iptables talk at AWeber

Netfilter and Iptables talk at AWeber

[julien]

Hi All,

A few weeks ago, I gave a presentation on Netfilter & Iptables at my 
company. The goal was to educate developers and give them the tools to 
diagnose firewall related issues.

I figured it would of interest to this list. I am also curious to get 
feedback from the community, as I will be holding a Netfilter workshop at 
Fosscon Philadelphia on August 11th. So if you have any comment, please reply 
here, or to me directly.

http://jve.linuxwall.info/blog/index.php?post/2012/08/01/Netfilter-and-Iptables-talk-at-AWeber

Cheers,

-- 
Julien Vehent - http://jve.linuxwal.info

Re: Netfilter and Iptables talk at AWeber

[Jan Engelhardt]

On Wednesday 2012-08-01 23:34, julien wrote:
>
>I figured it would of interest to this list. I am also curious to get 
>feedback from the community, as I will be holding a Netfilter workshop 
>at Fosscon Philadelphia on August 11th. So if you have any comment, 
>please reply here, or to me directly.
>
>http://jve.linuxwall.info/blog/index.php?post/2012/08/01/Netfilter-and-Iptables-talk-at-AWeber

For geoip blocking, there is also -m geoip from Xtables-addons.

AFW is not using -m conntrack though you used it earlier.


And a big grin for the christmas example.

Re: Netfilter and Iptables talk at AWeber

[Julien Vehent]

On 2012-08-02 11:46, Jan Engelhardt wrote:
> On Wednesday 2012-08-01 23:34, julien wrote:
>>
>>I figured it would of interest to this list. I am also curious to get
>>feedback from the community, as I will be holding a Netfilter workshop
>>at Fosscon Philadelphia on August 11th. So if you have any comment,
>>please reply here, or to me directly.
>>
>>http://jve.linuxwall.info/blog/index.php?post/2012/08/01/Netfilter-and-Iptables-talk-at-AWeber
>
> For geoip blocking, there is also -m geoip from Xtables-addons.
>

I was more interested in ipset than I was in geoip. The latest is on my todo 
list though.

> AFW is not using -m conntrack though you used it earlier.
>

I need to make that change, and open source AFW. That's in the pipe.

>
> And a big grin for the christmas example.

There shall be no talk without cat. That's an AWeber motto :)
But I'm really considering that type of rule for some systems. Keep a ssh 
relay accessible at all time, but block direct SSH on servers themselves at 
night.

- Julien