PUBLIC MARKS with tags linux & iptables

This trying to answer a question "Which rules (DROP or REJECT) should be used in firewalls, IDS etc"

Gufw est une interface graphique pour le logiciel de configuration du pare-feu installé par défaut dans Ubuntu : UFW.

UFW est un nouvel outil de configuration simplifié en ligne de commande de Netfilter, qui donne une alternative à l'outil iptables.

bored of dictionnary attacks on your SSH daemon ?

QoS sur Linux avec IPtables, un exemple de plus !

Shoreline, un outil de configuration de la QoS sur un routeur/firewall Linux

NuFirewall is a Linux distribution which provides a ready and easy to use firewall based on Netfilter and NuFW.

Un très bon how-to sur le Firewall iptables

Routage avancé sous GNU/Linux

doh. the one below is deprecated. If you did iptables [...] -j QUEUE, this is what happens next.

a barebone example of the "queue-to-userland-processing" feature of netfilter

Firewall Builder is multi-platform firewall configuration and management tool. It consists of a GUI and set of policy compilers for various firewall platforms. Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, ipfilter, OpenBSD PF and Cisco PIX. Technical summary of features supported by the policy compilers for all platforms can be found in the section "Modules" (see menu on the left). Being truly vendor-neutral, Firewall Builder can generate configuration file for any supported target firewall platform from the same policy created in its GUI. This provides for both consistent policy management solution for heterogeneous environments and possible migration path.

IPTables log analizer (TODO : find a nice name for it) displays Linux 2.4 iptables logs (rejected, acepted, masqueraded packets...) in a nice HTML page (it support rough netfilter logs but also Shorewall and Suse Firewall logs). This page shall be easy to read and understand to reduce the manual analysis time. This page containts statistics on packets and links to more detailled information on a given host, port, domain and so on.

Firewall Eyes est un outil d'analyse de logs en temps réel pour le pare-feu iptables. Grâce à une interface Web, vous visualisez et supervisez simplement et efficacement l'activité réseau traversant votre firewall. Vous détectez aisément les activités suspectes et ajustez votre politique de sécurité.

Have fun with iptables, squid and mogrify!