New answers tagged firewall
1
vote
Accepted
Load iptables or nftables rules as fast as possible during boot and before the network interfaces be put online
In Debian 12, iptables is by default a wrapper for the new nftables subsystem. The iptables-persistent package depends on package netfilter-persistent, which creates a service named netfilter-...
- 90.4k
0
votes
Load iptables or nftables rules as fast as possible during boot and before the network interfaces be put online
Depends on your distro, e.g. Fedora Linux does that for you. It's weird your distro doesn't - that's a security vulnerability absolutely worth reporting and fixing. Systemd has dependencies for ...
- 27.2k
0
votes
Unable to make MAC Adress accessible in nftables
As far as I've understood, table inet + hook input will only process traffic at Layer-3 and higher, i.e. the Ethernet information is already discarded at that point.
Since you apparently aren't doing ...
- 90.4k
0
votes
Blocking all ports but a few in iptables
Simply specifying a network interface like this:
iptables -N WHITELIST
iptables -A INPUT -j WHITELIST
iptables -i wlan0 -A WHITELIST --protocol tcp --match tcp --dport 4444 --jump ACCEPT
iptables -i ...
- 26
Top 50 recent answers are included