Differences between revisions 11 and 12
Revision 11 as of 2022-06-24 04:50:57
Size: 2344
Editor: PieterSmit
Comment:
Revision 12 as of 2022-07-12 10:44:53
Size: 2471
Editor: PieterSmit
Comment:
Deletions are marked like this. Additions are marked like this.
Line 4: Line 4:
 * Note: 2022-07 Start using [[Linux/NfTablesFirewall]] "nftfw package builds firewalls for nftables"
Line 58: Line 59:
----
CategorySecurity

FireHol - Firewall

  • Note: 2022-07 Start using Linux/NfTablesFirewall "nftfw package builds firewalls for nftables"

  • Note: 2022-06 loved Fireholl for iptables management, but now moving on as it does not support nftables.

  • Links: SecurityFirewall , linux/firewall , Firewall/Rules

  • A great tool to manage Linux iptables firewall rules
    • Simple bash interpreter.
      • Very compact syntax, easy to read.
    • Support IPv4 and IPv6
    • Same syntax used for QOS rules.
    • Integrates with IPSET for black listing etc.
    • Easy to extend , and supports multi up-link load-balancing.

Install Latest

IPSET

  • Install tool
    • $ sudo apt install ipset
  • Install tool
    • $ sudo apt install iprange
  • Add iptables support
    • $ sudo apt install xtables-addons-common

Firehol rule examples

Allow mosh ssh connections

  • server_mosh_ports="udp/60000:61000"
    client_mosh_ports="default"
    
    # Accept all client traffic on any interface
    interface any world
            client all accept
            server "ssh ping dns" accept
            server "mosh" accept
            server "dhcp" accept
            client "dhcp" accept

...


CategorySecurity

Linux/FireHol (last edited 2022-07-12 10:44:53 by PieterSmit)