Firehol je podle mého nejlepší nástavba nad iptables.
/etc/firehol/firehol.conf:
version 5
FIREHOL_LOG_LEVEL="7"
blacklist full "80.80.80.80/16"
# Accept all client traffic on any interface
interface any world
protection strong
server ident reject with tcp-reset
server "http ssh" accept src "10.26.1.0/24"
server "cups sane" accept src 10.26.1.58
client all accept
/etc/firehol/services/sane.conf:
#FHVER: 1:213
server_sane_ports="tcp/6566"
client_sane_ports="default"
/etc/default/firehol:
START_FIREHOL=YES
0 komentářů k “Firehol”
Pošlete komentář