PUBLIC MARKS with tag iptables

bored of dictionnary attacks on your SSH daemon ?

QoS sur Linux avec IPtables, un exemple de plus !

Shoreline, un outil de configuration de la QoS sur un routeur/firewall Linux

Gestion du champs DSCP avec IPTables

NuFirewall is a Linux distribution which provides a ready and easy to use firewall based on Netfilter and NuFW.

Un très bon how-to sur le Firewall iptables

Iptables tutorial

Routage avancé sous GNU/Linux

doh. the one below is deprecated. If you did iptables [...] -j QUEUE, this is what happens next.

a barebone example of the "queue-to-userland-processing" feature of netfilter

inetd

Firewall Builder is multi-platform firewall configuration and management tool. It consists of a GUI and set of policy compilers for various firewall platforms. Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, ipfilter, OpenBSD PF and Cisco PIX. Technical summary of features supported by the policy compilers for all platforms can be found in the section "Modules" (see menu on the left). Being truly vendor-neutral, Firewall Builder can generate configuration file for any supported target firewall platform from the same policy created in its GUI. This provides for both consistent policy management solution for heterogeneous environments and possible migration path.

IPTables log analizer (TODO : find a nice name for it) displays Linux 2.4 iptables logs (rejected, acepted, masqueraded packets...) in a nice HTML page (it support rough netfilter logs but also Shorewall and Suse Firewall logs). This page shall be easy to read and understand to reduce the manual analysis time. This page containts statistics on packets and links to more detailled information on a given host, port, domain and so on.

Firewall Eyes est un outil d'analyse de logs en temps réel pour le pare-feu iptables. Grâce à une interface Web, vous visualisez et supervisez simplement et efficacement l'activité réseau traversant votre firewall. Vous détectez aisément les activités suspectes et ajustez votre politique de sécurité.

Have fun with iptables, squid and mogrify!