April 2025
M T W T F S S
 123456
78910111213
14151617181920
21222324252627
282930  

Categories

April 2025
M T W T F S S
 123456
78910111213
14151617181920
21222324252627
282930  

Bridging, Transparent Firewalls and Intrusion Prevention

Contents

What is Bridging? Installing a Bridge Configuring a Bridge What is a Bridging Firewall? Installing a Bridging Ebtables Firewall Configuring a Bridging Ebtables Firewall Installing a Bridging Iptables Firewall Configuring a Bridging Iptables Firewall What is an Intrusion Prevention System? Installing an Intrusion Prevention System Configuring an Intrusion Prevention System

What is Bridging?

[…]

Stealth Firewalling with Linux

What Is Stealth Firewalling with Linux?Simply put, a stealth firewall is an Ethernet bridge with filtering capabilities. This means that it’s a firewall that operates at Layer 2 of the OSI model, leveraging netfilter rules and chains (Linux’s firewall system) applied to the bridge. For those not familiar with what a bridge is: an Ethernet […]

Iptables rewirte for 8080 and 8443

Another way of achieving the same thing is to add an iptable redirection rule.

We have done it this way, because we didn’t want to add the xinit package to our standard configuration.

These instructions were created on a Debian Lenny system.

Create a new “if-up” script:sudo vim /etc/network/if-up.d/jira-redirect

Make this its content:

#!/bin/bashfor i […]

IPTABLES TO BLOCK FACEBOOK

-A FORWARD -s 192.168.0.232 -m string –string “facebook.com” –algo kmp –to 65535 -j ACCEPTA FORWARD -m string –string “youtube.com” –algo kmp –to 65535 -j DROP-A FORWARD -m string –string “facebook.com” –algo kmp –to 65535 -j DROP-A FORWARD -m string –string “meebo.com” –algo kmp –to 65535 -j DROP

How to add Gnome to a CentOS 6 minimal install

I have been using the minimal iso (CentOS-6.0-x86_64-minimal.iso) to install CentOS 6. I wanted to add a GUI to my vm, but I could not find easy documentation showing how to add a GUI, or Gnome in this case, to a CentOS 6 minimal install. I was not looking for the smallest X windows install, […]

Blocking Nmap Scans using IPtables on Linux server

Below Rules will block few of the Nmap Scans on ur linux server

The default config files of IPtables for RHEL / CentOS / Fedora Linux are located here

/etc/sysconfig/iptables –

iptables -A INPUT -p tcp –tcp-flags ALL FIN -j DROP iptables -A INPUT -p tcp –tcp-flags ALL NONE -j DROP iptables -A INPUT […]

CentOS / Redhat Iptables

How do I configure a host-based firewall called Netfilter (iptables) under CentOS / RHEL / Fedora / Redhat Enterprise Linux? Netfilter is a host-based firewall for Linux operating systems. It is included as part of the Linux distribution and it is activated by default. This firewall is controlled by the program called iptables. Netfilter filtering […]

Java in Centos

Install java in centos

1. Download bin file using below command

wget http://download.oracle.com/otn-pub/java/jdk/6u27-b07/jdk-6u27-linux-i586.bin

If the link is not working, Please use the below link, If you need latest one download it.

http://www.oracle.com/technetwork/java/javase/downloads/index.html

2. After download complete it look like

jdk-6u26-linux-x64.bin?e=1312191174&h=c5f0b98f8ea25aca97f3b53be8497570

so we need to rename the file using below command,

mv jdk-6u26-linux-x64.bin?e=1312191174&h=c5f0b98f8ea25aca97f3b53be8497570 jdk-6u4-linux-x64.bin

[…]

Shorewall Firewall

Installing and configuring Shorewall in CentOS

Netfilter is a packet filtering in Linux 2.4.x and 2.6.x kernels Enables packet filtering (network address and port), NAT and other packages. Redesigned and highly improved from the previous kernel 2.2.x, ipchains and ipfwadm kernel 2.0.x.

Netfilter is a set of structures within the kernel that allows modules to […]

SCP

Fast SCP SCP is a great way to copy files from somewhere to somewhere else, but as we all know it can be slower than (insert slow metaphor here). Here’s a way you can get way speedier(really a word?) transfers using scp.

scp -c arcfour -C sourcefile desthost: BY This way we can copy the […]