Firewall
From DD-WRT Wiki
(Difference between revisions)
Revision as of 11:09, 16 May 2010 (edit) Glenn (Talk | contribs) (→External links - more) ← Previous diff |
Revision as of 11:10, 16 May 2010 (edit) (undo) Glenn (Talk | contribs) (→External links - chg) Next diff → |
||
Line 6: | Line 6: | ||
*[http://www.sns.ias.edu/~jns/wp/category/linux/unix-security/iptables/ sns.ias.edu: Iptables] | *[http://www.sns.ias.edu/~jns/wp/category/linux/unix-security/iptables/ sns.ias.edu: Iptables] | ||
**[http://www.sns.ias.edu/~jns/files/iptables_talk/t1.htm IPTABLES - An Overview] | **[http://www.sns.ias.edu/~jns/files/iptables_talk/t1.htm IPTABLES - An Overview] | ||
- | ***[http://www.sns.ias.edu/~jns/files/iptables_talk/x14.htm Kernel space structure - simple packet journey through kernel] - please note that the left and right upper red arrows together, is some local network ports input and output. The local port packet might be [[wikipedia:Virtual_LAN|vlan]] tagged. The five blue balls represent the default firewall chains hook points. The "local process" is in your router box - e.g. remote management ([[WEB server]], [[Telnet/SSH_and_the_Command_Line#Setting_Up|Telnet or SSH server]]), [[:Category:Samba| | + | ***[http://www.sns.ias.edu/~jns/files/iptables_talk/x14.htm Kernel space structure - simple packet journey through kernel] - please note that the left and right upper red arrows together, is some local network ports input and output. The local port packet might be [[wikipedia:Virtual_LAN|vlan]] tagged. The five blue balls represent the default firewall chains hook points. The "local process" is in your router box - e.g. remote management ([[WEB server]], [[Telnet/SSH_and_the_Command_Line#Setting_Up|Telnet or SSH server]]), [[:Category:Samba|Samba server]], [[:Category:PPPOE|PPPoE client]], [[:Category:DHCP|DHCP server(s) or client]] and so on. |
*[[wikipedia:Netfilter]] | *[[wikipedia:Netfilter]] | ||
**[http://www.netfilter.org/documentation/ netfilter.org: Documentation about the netfilter/iptables project], [http://lists.netfilter.org/pipermail/netfilter/ lists] | **[http://www.netfilter.org/documentation/ netfilter.org: Documentation about the netfilter/iptables project], [http://lists.netfilter.org/pipermail/netfilter/ lists] |
Revision as of 11:10, 16 May 2010
- DD-WRT Firewall Example
- iptables commands (written for DD-WRT)
External links
- Firewall Generic and short: Purpose and processes.
- sns.ias.edu: Iptables
- IPTABLES - An Overview
- Kernel space structure - simple packet journey through kernel - please note that the left and right upper red arrows together, is some local network ports input and output. The local port packet might be vlan tagged. The five blue balls represent the default firewall chains hook points. The "local process" is in your router box - e.g. remote management (WEB server, Telnet or SSH server), Samba server, PPPoE client, DHCP server(s) or client and so on.
- IPTABLES - An Overview
- wikipedia:Netfilter
- interhack.net: Internet Firewalls: Frequently Asked Questions Good.
- Web archive backup (be patient): Kernel Packet Traveling Diagram Quote: "...On the LARTC mailing list, there was a long discussion about how a packet is handled by the kernel. Finally, there was a post by Leonardo Balliache that I copied onto this page. I hope this helps people to better understand how it all works....", Good ASCII drawing of the ethernet/ip packet journey through the Linux Kernel. Simplify the drawing for yourself, if you do not use some of the processes.
- Another good drawing of the ethernet/ip packet journey through the Linux Kernel with some actions written
- Iptables-tutorial - e.g. on-line:
- Iptables Tutorial, Oskar Andreasson Good and very thorough.
- Ipsysctl-tutorial - e.g. on-line:
- Ipsysctl tutorial, Oskar Andreasson, Good and very thorough.
- sans.org: SANS InfoSec Reading Room - Firewalls & Perimeter Protection notably:
- My Firewall Page - "A Firewall is a concept..." Quote: "...Generic Packet-Filter Ruleset...Keep in mind that these hints are for a single workstation-computer connected to the Internet..."
- Firewall Knowledgebase notably:
- DD-WRT Specific IPTables Info
- OpenWRT Advanced Firewall