A little bit of wisdom
UPDATE 06/2023 The nf_conntrack_proto_gre is now a built-in module in kernel >= 5.1 and it is not possible to build it as a separate module. You can check if the module is built into the running kernel using the following command: grep CONFIG_NF_CT_PROTO_GRE /boot/config-$(uname -r) Output of above: (this means the module is built into […]
I wanted to enable ulogd for my firewall logging, but after finding several sites with examples, none of them worked for me. So after gathering snippets of info from various sites, I managed to put a working configuration together, which is what you see here. This is on Debian 8.9 (Jessie) Install ulogd (ulogd is […]
ipsets is a fairly recent addition to the netfilter family. It is possible to define networks / addresses and then use them in iptables. ipset –create bogons nethash ipset –add bogons 10.0.0.0/8 ipset –add bogons 192.168.0.0/16 ipset –add bogons 0.0.0.0/8 ipset –add bogons 169.254.0.0/16 ipset –add bogons 172.16.0.0/12 ipset –add bogons 192.0.2.0/24 ipset –add bogons […]
by