Reading time: < 1 minute
Ahir em vaig passar tot el dia per entendre les noves polítiques de
filtrat del kernel 2.4. Així doncs, he decidit fer-ne un resum, pq quan
se m’oblidi ho pugui recordar ràpidament.
El resum esta al SDMS en un fitxer que es diu netfilter-nat.txt, les
keywords, per trobar ràpidament el document són: netfilter nat
firewall xarxes networking linux.
4 thoughts on “NAT i NETFILTER al kernel 2.4”
gShield is an aggressive, modular firewall script for iptables which features
easy configuration through a BSD-style configuration file, optional NAT
support, TCP-wrapper-like functionality for service access, port forwarding,
routable protection, DMZ support, user-defined open ports, transparent proxy
support, and more.
La URL del programa és: http://www.kurd.nu/monmotha/index.php
MonMotha’s IPTables firewall is a simple shell script written in BASH. It has
no extra subs or functions that I define, it’s just run from top to bottom.
Hopefully this will make it fairly easy to work with. The firewall attempts to
make setting up a firewall on a linux system running a 2.4 Linux kernel as easy
or easier than installing most other software The firewall is easily
configurable by changing the options located after the initial comment block of
the script to the desired options. Fairly sensable defaults are used in case
someone forgets this step. Many user-oriented features such as support for
incoming (and outgoing with the proper kernel module) active ftp, and definable
SSH support make this firewall an excellent choice for people who want to do a
minimum of playing and a maximum of surfing…securely. There is also no need
to rerun the script if your IP address changes. This makes it perfect for
dial-up users! The firewall is a self contained script (at least in it’s
original form) and has no external configuration files, making it a simple copy
to your bootscript directory and a possible modification to another script to
call this. While the script was designed with a BSD-style init system
(Slackware uses these) in mind, it should work perfectly on a system that uses
SysV style (such as RedHat Linux).
He vist a freshmeat.net un entorn en mode text (ncurses) molt currat per
controlar les iptables, fins hi tot permet el tema de les classes de
tràfic (CBQ).La url del soft és:
http://users.pandora.be/stes/ipmenu.html
http://www.securityportal.com/articles/netfilter20010219.printerfriendly.html
Resum ràpid del funcionament del Netfilter pel kernel 2.4, com a
referència inicial està força bé.
Comments are closed.