Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #167078

Re: Firewall - basic config?

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Apr 23, 2016 3:54 PM, "Joe" <joe@jretrading.com> wrote:
>
.
>
> You might also try iptables -S which will list the rules in the form
> that you would enter by hand as arguments to the iptables command. It is
> a different view, and you may see things that are less obvious in the
> -L view.
>

I'm guessing -S is the same as iptables-save...? If so, then yes that's the
way to look at rules and what you want to paste when asking for help. There
are two times when I went nL output - when testing and want a delete number
(so with the --line-numbers option) and when I think a table is useless and
want to call reference count. That's literally it. Otherwise you probably
want to see the rules closer to how the kernel does.

Also, if you script your restore (I'm guessing ufw handles this...
properly) do use a restore file vs looping the iptables command for each
rule - besides being proper, it's also a *hell* of a lot faster.

> Remember that IPv6 is alive and well in quite a lot of hardware these
> days, and there is an ip6tables to deal with it.
>

Ie, unless you're using it, disable it (both with ip6tables and blacklist
modules)

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Firewall - basic config? Harris Paltrowitz <harrisupstate@yahoo.com> - 2016-04-23 19:10 +0200
  Re: Firewall - basic config? Reco <recoverym4n@gmail.com> - 2016-04-23 20:10 +0200
    Re: Firewall - basic config? Michael Milliman <michael.e.milliman@gmail.com> - 2016-04-24 07:20 +0200
      Re: Firewall - basic config? Reco <recoverym4n@gmail.com> - 2016-04-24 11:00 +0200
        Re: Firewall - basic config? Michael Milliman <michael.e.milliman@gmail.com> - 2016-04-26 04:10 +0200
  Re: Firewall - basic config? Joe <joe@jretrading.com> - 2016-04-23 22:00 +0200
    Re: Firewall - basic config? shawn wilson <ag4ve.us@gmail.com> - 2016-04-25 15:50 +0200
  Re: Firewall - basic config? cbannister@slingshot.co.nz - 2016-04-27 10:40 +0200
  Re: Firewall - basic config? Jonathan Dowland <jmtd@debian.org> - 2016-04-27 11:30 +0200
    Re: Firewall - basic config? Harris Paltrowitz <harrisupstate@yahoo.com> - 2016-04-27 13:50 +0200

csiph-web