Iptables - Revision history

T1t0: /* Routing / Masquerade */

2022-03-29T00:30:12Z

Routing / Masquerade

← Older revision		Revision as of 00:30, 29 March 2022
Line 31:		Line 31:
	= Routing / Masquerade =		= Routing / Masquerade =

			* FORWARD and NAT Rules https://docs.fedoraproject.org/en-US/Fedora/13/html/Security_Guide/sect-Security_Guide-Firewalls-FORWARD_and_NAT_Rules.html
	* IP Masquerading using iptables http://billauer.co.il/ipmasq-html.html		* IP Masquerading using iptables http://billauer.co.il/ipmasq-html.html
	* Setting Up Linux Network Gateway Using iptables and route https://www.systutorials.com/setting-up-gateway-using-iptables-and-route-on-linux/		* Setting Up Linux Network Gateway Using iptables and route https://www.systutorials.com/setting-up-gateway-using-iptables-and-route-on-linux/

T1t0 at 00:00, 29 March 2022

2022-03-29T00:00:17Z

← Older revision		Revision as of 00:00, 29 March 2022
Line 28:		Line 28:

	* from https://www.rackaid.com/blog/how-to-block-ssh-brute-force-attacks/		* from https://www.rackaid.com/blog/how-to-block-ssh-brute-force-attacks/

			= Routing / Masquerade =

			* IP Masquerading using iptables http://billauer.co.il/ipmasq-html.html
			* Setting Up Linux Network Gateway Using iptables and route https://www.systutorials.com/setting-up-gateway-using-iptables-and-route-on-linux/
			* new route command, example https://serverfault.com/a/836708
			* deny rule for masquerade, example https://serverfault.com/a/256267
			* aws nat script https://serverfault.com/a/522135

			= Debugging =

			* https://serverfault.com/a/126078

	[[Category:network]]		[[Category:network]]
	[[Category:firewall]]		[[Category:firewall]]
	[[Category:iptables]]		[[Category:iptables]]

T1t0: /* List */

2022-03-28T23:51:39Z

List

← Older revision		Revision as of 23:51, 28 March 2022
Line 4:		Line 4:

	<pre>		<pre>
	iptables -L -n --line-numbers		iptables -L -v -n -x --line-numbers -t filter
			iptables -L -v -n -x --line-numbers -t nat
	</pre>		</pre>

T1t0 at 02:00, 21 October 2020

2020-10-21T02:00:04Z

← Older revision		Revision as of 02:00, 21 October 2020
Line 5:		Line 5:
	<pre>		<pre>
	iptables -L -n --line-numbers		iptables -L -n --line-numbers
			</pre>

			= Redirect outgoing connection to a different port =

			For instance, the following command will redirect outgoing connection to http service on the 10.0.0.1 host to a localhost service:

			<pre>
			iptables -t nat -A PREROUTING -d 10.0.0.1 -p tcp -m multiport --dports 80,443 -j DNAT --to-destination 127.0.0.1:8080
	</pre>		</pre>

T1t0 at 20:50, 19 October 2020

2020-10-19T20:50:33Z

← Older revision		Revision as of 20:50, 19 October 2020
Line 21:		Line 21:

	[[Category:network]]		[[Category:network]]
			[[Category:firewall]]
			[[Category:iptables]]

T1t0: /* List */

2020-10-19T20:48:26Z

List

← Older revision		Revision as of 20:48, 19 October 2020
Line 1:		Line 1:
	= List =		= List =

	To see the current firewall rules ~~for a specific chain (ex INPUT)~~:		To see the current firewall rules:

	<pre>		<pre>
	iptables -L ~~INPUT~~ -n --line-numbers		iptables -L -n --line-numbers
	</pre>		</pre>

T1t0 at 20:46, 19 October 2020

2020-10-19T20:46:10Z

← Older revision		Revision as of 20:46, 19 October 2020
Line 1:		Line 1:
	~~Blocking brute force attack:~~		= List =

	~~la connessione in entrata sara' memorizzata nella lista SSH_LIST~~ (~~primo comando) e i tentativi di connessione successivi al 2° in un intervallo di 60 minuti saranno ignorati (secondo comando~~):		To see the current firewall rules for a specific chain (ex INPUT):

	<pre>		<pre>
	iptables -I INPUT 1 -~~p tcp~~ --~~dport 22~~ -~~m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP~~		iptables -L INPUT -n --line-numbers
	~~iptables -I INPUT 2 -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST~~
	</pre>		</pre>

	~~per visualizzare la lista di regole del firewall e' utile il comando~~ a ~~seguire~~		= Block a brute force attack =

			The follow commands will store incoming connections in SSH_LIST and drop attempts that exceeds 2 connections in 60 seconds:

	<pre>		<pre>
	iptables -L INPUT -n --~~line~~-~~numbers~~		iptables -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST
			iptables -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP
	</pre>		</pre>

	Script ~~disponibile~~ in [[script_iptables_SSHlimit.sh\|iptables_SSHlimit.sh]]		Script available in [[script_iptables_SSHlimit.sh\|iptables_SSHlimit.sh]]

			* from https://www.rackaid.com/blog/how-to-block-ssh-brute-force-attacks/

	[[Category:~~to_translate~~]]		[[Category:network]]

imported>T1t0 at 03:00, 8 July 2018

2018-07-08T03:00:16Z

← Older revision		Revision as of 03:00, 8 July 2018
Line 14:		Line 14:

	Script disponibile in [[script_iptables_SSHlimit.sh\|iptables_SSHlimit.sh]]		Script disponibile in [[script_iptables_SSHlimit.sh\|iptables_SSHlimit.sh]]

			[[Category:to_translate]]

imported>T1t0 at 03:16, 1 December 2011

2011-12-01T03:16:43Z

New page

Blocking brute force attack:

la connessione in entrata sara' memorizzata nella lista SSH_LIST (primo comando) e i tentativi di connessione successivi al 2° in un intervallo di 60 minuti saranno ignorati (secondo comando):

<pre>
iptables -I INPUT 1 -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP
iptables -I INPUT 2 -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST
</pre>

per visualizzare la lista di regole del firewall e' utile il comando a seguire
<pre>
iptables -L INPUT -n --line-numbers
</pre>

Script disponibile in [[script_iptables_SSHlimit.sh|iptables_SSHlimit.sh]]