fwknop and firewalld
by Peter Vrabec
Hi,
I have found out recently that fwknop claims firewalld support since
fwknop-2.6.4 (11/16/2014).
https://github.com/mrash/fwknop/blob/master/ChangeLog
We have fwknop-2.6.3 in F21 and before we continue with upgrade I'd like
to ask what are your thoughts about the integration? Is it done correctly?
Thanks,
Peter.
PS: Please CC me for replies
--
Peter Vrabec
Engineering Manager, Security Technologies
Red Hat, Inc.
9 years, 1 month
Is there any way to rate limit on a host by host basis
by Anders Blomdell
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I think this is how it could be done directly in iptables:
/usr/sbin/iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent --set
/usr/sbin/iptables -I INPUT -p tcp --dport 22 -i eth0 -m state --state NEW -m recent --update --seconds 60 --hitcount 4 -j DROP
/Anders
- --
Anders Blomdell Email: anders.blomdell(a)control.lth.se
Department of Automatic Control
Lund University Phone: +46 46 222 4625
P.O. Box 118 Fax: +46 46 138118
SE-221 00 Lund, Sweden
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBAgAGBQJU0LQYAAoJENZYyvaDG8NcKWkIAIeZSEKMgAistrJXx9AiT8Tm
oFat8Ndcn7LZbdfoTL8unsq7A8UQuTAsGa+Hg04x6i5707oWA5+jEpU5/xo2zmmn
zLGwmfiAhlFhClxNpo7DuF3IIWHDfyOTYLtmWcVpoCjExzO8znBdpcSIw0cBRh3S
9ziYuB6C7dt0vFUpGqjfdYqXP25IctAgDB+HN7DnFCMmVuzpjQvxEH73dgs5R3FD
lZ39kAS6iy7sAbzwHKjq/b/mQ5oBgmVWoBQxOLkpP6OFz64Ng7SepOubmCJlx2+5
/uII9NsrHqJ8LaaeaxoX/ZWPQkfKbKmURC/CoYUl6QXhAXNhgzc31MZYcqrDTJQ=
=VsM5
-----END PGP SIGNATURE-----
9 years, 2 months