PUBLIC MARKS with tags iptables & firewall

This trying to answer a question "Which rules (DROP or REJECT) should be used in firewalls, IDS etc"

Gufw est une interface graphique pour le logiciel de configuration du pare-feu installé par défaut dans Ubuntu : UFW.

UFW est un nouvel outil de configuration simplifié en ligne de commande de Netfilter, qui donne une alternative à l'outil iptables.

Shoreline, un outil de configuration de la QoS sur un routeur/firewall Linux

NuFirewall is a Linux distribution which provides a ready and easy to use firewall based on Netfilter and NuFW.

Un très bon how-to sur le Firewall iptables

doh. the one below is deprecated. If you did iptables [...] -j QUEUE, this is what happens next.

a barebone example of the "queue-to-userland-processing" feature of netfilter

inetd

Firewall Builder is multi-platform firewall configuration and management tool. It consists of a GUI and set of policy compilers for various firewall platforms. Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, ipfilter, OpenBSD PF and Cisco PIX. Technical summary of features supported by the policy compilers for all platforms can be found in the section "Modules" (see menu on the left). Being truly vendor-neutral, Firewall Builder can generate configuration file for any supported target firewall platform from the same policy created in its GUI. This provides for both consistent policy management solution for heterogeneous environments and possible migration path.

IPTables log analizer (TODO : find a nice name for it) displays Linux 2.4 iptables logs (rejected, acepted, masqueraded packets...) in a nice HTML page (it support rough netfilter logs but also Shorewall and Suse Firewall logs). This page shall be easy to read and understand to reduce the manual analysis time. This page containts statistics on packets and links to more detailled information on a given host, port, domain and so on.

Firewall Eyes est un outil d'analyse de logs en temps réel pour le pare-feu iptables. Grâce à une interface Web, vous visualisez et supervisez simplement et efficacement l'activité réseau traversant votre firewall. Vous détectez aisément les activités suspectes et ajustez votre politique de sécurité.

Have fun with iptables, squid and mogrify!

1. 如何查询我目前 iptables 的配置组态设定 ? 2. 如何关闭 Linux Distro 本身的 firewall 配置并让规则清空不启用？ 3. 关于 RedHat 9, Fedora 与 RHEL 的 firewall 配置问题 4. 如何使用手动方式清空与重置 iptables firewall rule？