Understand iptables in one article
preface
netfilter/iptables (iptables for short) constitute the packet filtering firewall under Linux platform
The iptables component is a tool, also known as user space, that makes it easy to insert, modify, and remove rules from the packet filter table
netfilter component, also known as kernel space, is a part of the kernel. It is composed ...
Added by Tensing on Thu, 17 Feb 2022 17:31:16 +0200
iptables are shielded according to the specified country (installation and use of GEOIP module)
iptables are shielded according to the specified country (installation and use of GEOIP module)
This process is suitable for Centos7* system
1, Install iptables addons (geoip module)
1. Download lux source wget http://repo.iotti.biz/CentOS/7/noarch/lux-release-7-1.noarch.rpm
2. Install lux source rpm -ivh lux-release-7-1.noarch.rpm --f ...
Added by calavera on Thu, 10 Feb 2022 01:03:20 +0200
Linux private room - Shell command SNAT and DNAT firewall
1.SNAT
1.1 SNAT application environment
LAN hosts share a single public IP address to access the Internet (private IP cannot be routed normally in the Internet)
1.2 SNAT principle
Modify the source address of the packet
1.3 preconditions for SNAT conversion
1. Each host of LAN has correctly set IP address, subnet mask and default gate ...
Added by neo926 on Tue, 08 Feb 2022 08:34:53 +0200
linux Firewall iptables
1, Introduction to Linux Firewall
yum -y install iptables-services.x86_64 #install
Must be closed first firewalld firewall
[root@localhost ~]# systemctl stop firewalld.service
[root@localhost ~]# systemctl disable firewalld.service
install iptables firewall
[root@localhost ~]# yum -y install iptables-services.x86_64 #install
[root ...
Added by CoreLEx on Wed, 02 Feb 2022 07:07:33 +0200
An interesting experience of Docker network troubleshooting. It feels like a dream
Some time ago, there was a problem with the company's Android packaging service. The phenomenon is that when uploading the 360 server for reinforcement, it is very likely to get stuck in the upload stage, retry for a long time, and finally fail. I have conducted some troubleshooting and Analysis on this situation, solved this problem, wrote thi ...
Added by formxshape on Thu, 27 Jan 2022 20:34:19 +0200
Huawei cloud Centos installation and configuration PPTP VPN service
1, Deploy PPTP VPN server
1. Check whether the server system environment supports the installation of pptp
1,Check whether the system kernel supports MPPE patch
[root@PPTP ~]# modprobe ppp-compress-18 && echo success
display success Description system support MPPE If the patch is not supported, you need to install it first k ...
Added by Imperialoutpost on Wed, 26 Jan 2022 00:24:37 +0200
netfilter Kernel Implementation overview
netfilter Kernel Implementation overview
1, Foreword
netfilter is the foundation of network firewall in Linux kernel. Whether it is iptables based on xtables, conntrack and nftables, its bottom layer is based on netfilter. In general, netfilter provides a relatively general firewall framework, which provides an entry through which other netwo ...
Added by bugcoder on Tue, 25 Jan 2022 08:08:45 +0200
iptables summary
iptables
firewall
Function: prevent others from entering your own computer and attacking your own computer. You can't kill viruses
Attack mode:
dos
ddos
cc
syn flooding et al
SNMP protocol --- simple network manager protocol
Simple network management protocol port 161 tcp/udp
Software firewall
The firewall function of linux system is ...
Added by wizzard81 on Sat, 22 Jan 2022 14:03:59 +0200
CentOS 7.0 Firewall On/Off
CentOS 7.0 uses firewall as a firewall by default and uses systemctl to manage services and programs, including service and chkconfig
1. View the default firewall status (not running when turned off, running when turned on)
[root@localhost ~]# firewall-cmd --state
not running
2. Check the status of the firewall
[ro ...
Added by kabucek on Fri, 03 Jul 2020 19:18:49 +0300
Fastdfs_5.08 + nginx_14.0 cluster deployment
Fastdfs_5.08 + nginx_14.0 cluster deployment
Server planning:
1, All tracker and storage nodes should execute:
2, Configure tracker server
3, Configure storage server
4, File upload test (ip01)
5, Install fastdfs nginx module on all storage nodes
6, Verify: access files uploaded during test through ...
Added by knucklehead on Thu, 11 Jun 2020 07:13:58 +0300