Tag Info

Hot answers tagged

4

You need to use a binary number (2,4,8,16, 32) so either you use a bigger or a smaller range. Exactly 20 hosts just is not possible with a bitmask in a single rule: 16 hosts (192.168.1.16 to 192.168.1.31): sudo ufw allow proto tcp from 192.168.1.16/28 to 192.168.1.48 port 80 Details Address: 192.168.1.16 11000000.10101000.00000001.0001 0000 ...


3

A basic Desktop firewall is going to deny inbound and allow outbound 'traffic' in a basic setup. Essentially, while Windows can incorporate application-based filtering, it's default rulesets are to permit outbound and reject inbound except where the outbound traffic is getting a response. This is the typical "desktop" firewall setup usually observed in the ...


2

Generally iptables rules are saved or loaded by scripts residing in /etc/init.d. Assuming the scripts are using the typical iptables-save and iptables-restore commands, you could search for them with a recursive grep, for example: grep -R iptables-restore /etc/init.d/ If the grep command output reveals any files, you can see what package was responsible ...


2

You could monitor the output of netstat. the flags -tpan allow viewing which program uses which port. In theory you could write a simple script that constantly checks number of those connections with grep, and if the number of connections have changed, you could get a notification. Note, that sshd won't be shown unless you run that command with sudo, so the ...


1

UFW is the Uncomplicated Firewall. It manages what ports on your computer can be opened for listening by an application. sudo ufw allow80/tcp means allow TCP connections to port 80. However, there is nothing actually listening in behind the port. To curl the port, there should be an application that will send a reply. This is typically called a server. As ...


1

Below is a guide I found on Airvpn forums. It was very helpful in understanding the same problem I had. In the following quick tutorial I will try to give you some guidance to get a simple setup (hopefully) working. This is only for general guidance. Adjust addresses, port numbers and protocols as needed. E.g. If your router is on a different IP-address ...


1

You could, but it would be a bad idea: your notify system will be overwhelmed by the constant sniffing/probing from the Internet and your outgoing connections … If you still want to move ahead, I would: First move the iptables log to it's own file and then open a terminal window and do a: tail --follow /var/log/iptables.log and then you'll understand ...


1

An application called sslh and described as an "Applicative protocol multiplexer" was designed to do exactly what you want. The application functionality is described at ssl/ssh multiplexer and it is available through links at that site.



Only top voted, non community-wiki answers of a minimum length are eligible