Projet

Général

Profil

IPTables » Historique » Version 11

Laurent GUERBY, 06/10/2013 00:09

1 1 Laurent GUERBY
{{>toc}}
2 1 Laurent GUERBY
3 1 Laurent GUERBY
h1. IPTables
4 1 Laurent GUERBY
5 1 Laurent GUERBY
* http://www.bortzmeyer.org/dns-netfilter-u32.html
6 1 Laurent GUERBY
* http://www.stearns.org/doc/iptables-u32.current.html
7 1 Laurent GUERBY
* http://ebtables.sourceforge.net/br_fw_ia/PacketFlow.png
8 1 Laurent GUERBY
* http://ebtables.sourceforge.net/
9 6 Laurent GUERBY
* http://www.inetdoc.net/guides/iptables-tutorial/traversingoftables.html
10 11 Laurent GUERBY
* http://upload.wikimedia.org/wikipedia/commons/3/37/Netfilter-packet-flow.svg
11 10 Laurent GUERBY
* https://en.wikipedia.org/wiki/List_of_router_or_firewall_distributions
12 2 Laurent GUERBY
13 2 Laurent GUERBY
DHCP ?
14 3 Laurent GUERBY
sysctl -w net.bridge.bridge-nf-call-iptables=1 
15 3 Laurent GUERBY
sysctl -w net.bridge.bridge-nf-call-ip6tables=1 
16 3 Laurent GUERBY
iptables -A INPUT -p udp --sport 68 --dport 67 -j DROP
17 2 Laurent GUERBY
18 4 Laurent GUERBY
https://bugzilla.redhat.com/show_bug.cgi?id=512206
19 4 Laurent GUERBY
20 7 Laurent GUERBY
* libnml
21 7 Laurent GUERBY
** http://www.spinics.net/lists/netfilter/msg52868.html
22 7 Laurent GUERBY
** http://1984.lsi.us.es/~pablo/docs/spae.pdf
23 7 Laurent GUERBY
24 2 Laurent GUERBY
h1. ebtables
25 2 Laurent GUERBY
26 9 Laurent GUERBY
ebtables -A FORWARD -d ff:ff:ff:ff:ff:ff/ff:ff:ff:ff:ff:ff -p IPv4 --ip-prot udp --ip-dport 67:68 -j DROP
27 9 Laurent GUERBY
28 2 Laurent GUERBY
* http://serverfault.com/questions/284290/two-dhcp-servers-block-clients-for-one-of-them
29 5 Laurent GUERBY
30 5 Laurent GUERBY
ebtables -A INPUT --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP
31 5 Laurent GUERBY
ebtables -A INPUT --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
32 5 Laurent GUERBY
ebtables -A FORWARD --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
33 5 Laurent GUERBY
ebtables -A FORWARD --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP
34 8 Laurent GUERBY
35 8 Laurent GUERBY
h1. ipset
36 8 Laurent GUERBY
37 8 Laurent GUERBY
http://ipset.netfilter.org/