The firewall tag has no wiki summary.
0
votes
3answers
68 views
How To See Which Ports Are Open On A Particular Firewall
Using the terminal I was wondering if it would be possible to see a list of all the active firewalls on a particular system that I have shelled into. I want to be able to see which ports are active ...
1
vote
0answers
17 views
How to use berkeley packet filter (BPF) on ubuntu [migrated]
I did search but I did't find any BPF code to use on my computer, also there isn't any example code to use. My goal is to find low level functions to filter packets. I am working in C program ...
1
vote
1answer
62 views
How do I shut down ports remotely without shutting myself out?
I have an Ubuntu 11.04 server in a remote location on another continent, so I have no physical access to it. I only interact with it by ssh (and scp), and intend to only ever interact with it that ...
2
votes
0answers
122 views
Installing pfSense firewall on an SSD
I was looking at creating a home firewall running pfSense (as I could not get IPCop to boot properly on my hardware). Doing a little research, however, I have some concerns with installing it onto an ...
2
votes
2answers
132 views
Linux Home Firewall
I was recently delving into thoughts of building a small home server to run random things off of (maybe a TF2 server). Thinking about this further I realized I would need to get a better firewall ...
1
vote
1answer
45 views
iptable rule to redirect only https handshake?
I was reading this interesting article today: http://www.moserware.com/2009/06/first-few-milliseconds-of-https.html
A crazy thought came to mind...Is it possible to write an iptable rule that only ...
4
votes
2answers
160 views
Preventing program from using internet
Is there a way to block certain programs from being able to connect to the internet in Debian (a firewall blocking outgoing connections), so for example, to block a windows program running in wine ...
4
votes
0answers
69 views
iptables on tor exit node
I want to run an open Tor router.
My exit policy will be similar to ReducedExitPolicy.
But I also want to make it hard for the tor network to abuse my resources.
Cases I want to prevent clients ...
2
votes
0answers
66 views
Outgoing firewall application similar to Little Snitch for Mac
Is there a Linux application similar to Little Snitch? Little Snitch is an outgoing firewall that temporarily blocks outgoing network requests until the user decides whether to allow the connection or ...
1
vote
1answer
92 views
Can I use divert as an alternative to ipfw fwd?
I would like to lead some traffic through a transparent proxy (which actually is on another server and connected with an ssh tunnel).
Normally I could do this:
ipfw add forward localhost,8080 tcp ...
-2
votes
4answers
105 views
Steps to secure your server? [closed]
Possible Duplicate:
What to use to harden Linux box? Apparmor, SELinux, grsecurity, SMACK, chroot?
I'm just completed install my web server.
So what should i do to secure it?
I just ...
1
vote
0answers
79 views
How can I block a range of IP addresses with an Amazon EC2 instance?
I know a certain range of IP addresses are causing problem with my server, 172.64.*.* what is the best way to block access to my Amazon EC2 instance? Is there a way to do this using security groups or ...
4
votes
3answers
195 views
Per process firewall?
I've been reading around but can't seem to find a way to create per-process firewall rules. I know about iptables --uid-owner but that only works for outgoing traffic. I've considered scripting ...
2
votes
0answers
181 views
pfsense long ping to google
I have a pfsense box set up. What happens is I set a rule so I can't hit the admin interface 192.168.3.1 from the box.
With the rule enabled
--- www.l.google.com ping statistics ---
2 packets ...
7
votes
4answers
609 views
Why do we need a firewall if no programs are running on your ports?
When I try to telnet to a port on a server, and if there is no program listening on that port telnet dies with a "Unable to connect ... " error. I understand that. But, why do we need a firewall if ...