Firewall
From DD-WRT Wiki
(Difference between revisions)
Revision as of 11:41, 16 May 2010 (edit) Glenn (Talk | contribs) (→External links - linkchg) ← Previous diff |
Revision as of 11:43, 16 May 2010 (edit) (undo) Glenn (Talk | contribs) (→External links - chg) Next diff → |
||
Line 6: | Line 6: | ||
*[http://www.sns.ias.edu/~jns/wp/category/linux/unix-security/iptables/ sns.ias.edu: Iptables] | *[http://www.sns.ias.edu/~jns/wp/category/linux/unix-security/iptables/ sns.ias.edu: Iptables] | ||
**[http://www.sns.ias.edu/~jns/files/iptables_talk/t1.htm IPTABLES - An Overview] | **[http://www.sns.ias.edu/~jns/files/iptables_talk/t1.htm IPTABLES - An Overview] | ||
- | ***[http://www.sns.ias.edu/~jns/files/iptables_talk/x14.htm Kernel space structure - simple packet journey through kernel] - please note that the left and right upper red arrows together, is the input and output of some router box physical or logical [[:Category:Interfaces|network interface | + | ***[http://www.sns.ias.edu/~jns/files/iptables_talk/x14.htm Kernel space structure - simple packet journey through kernel] - please note that the left and right upper red arrows together, is the input and output of some router box physical or logical [[:Category:Interfaces|network interface]] (bridge=[[:Category:switch|switch]] - or port). The local interface packet might be [[wikipedia:Virtual_LAN|vlan]] tagged. The five blue balls represent the default firewall chains hook points. The "local process" is in your router box - e.g. remote management ([[WEB server]], [[Telnet/SSH_and_the_Command_Line#Setting_Up|Telnet or SSH server]]), [[:Category:Samba|Samba server]], [[:Category:PPPOE|PPPoE client]], [[:Category:DHCP|DHCP server(s) or client]] and so on. |
*[[wikipedia:Netfilter]] | *[[wikipedia:Netfilter]] | ||
**[http://www.netfilter.org/documentation/ netfilter.org: Documentation about the netfilter/iptables project], [http://lists.netfilter.org/pipermail/netfilter/ lists] | **[http://www.netfilter.org/documentation/ netfilter.org: Documentation about the netfilter/iptables project], [http://lists.netfilter.org/pipermail/netfilter/ lists] |
Revision as of 11:43, 16 May 2010
- DD-WRT Firewall Example
- iptables commands (written for DD-WRT)
External links
- Firewall Generic and short: Purpose and processes.
- sns.ias.edu: Iptables
- IPTABLES - An Overview
- Kernel space structure - simple packet journey through kernel - please note that the left and right upper red arrows together, is the input and output of some router box physical or logical network interface (bridge=switch - or port). The local interface packet might be vlan tagged. The five blue balls represent the default firewall chains hook points. The "local process" is in your router box - e.g. remote management (WEB server, Telnet or SSH server), Samba server, PPPoE client, DHCP server(s) or client and so on.
- IPTABLES - An Overview
- wikipedia:Netfilter
- interhack.net: Internet Firewalls: Frequently Asked Questions Good.
- Web archive backup (be patient): Kernel Packet Traveling Diagram Quote: "...On the LARTC mailing list, there was a long discussion about how a packet is handled by the kernel. Finally, there was a post by Leonardo Balliache that I copied onto this page. I hope this helps people to better understand how it all works....", Good ASCII drawing of the ethernet/ip packet journey through the Linux Kernel. Simplify the drawing for yourself, if you do not use some of the processes.
- Another good drawing of the ethernet/ip packet journey through the Linux Kernel with some actions written
- Iptables-tutorial - e.g. on-line:
- Iptables Tutorial, Oskar Andreasson Good and very thorough.
- Ipsysctl-tutorial - e.g. on-line:
- Ipsysctl tutorial, Oskar Andreasson, Good and very thorough.
- sans.org: SANS InfoSec Reading Room - Firewalls & Perimeter Protection notably:
- My Firewall Page - "A Firewall is a concept..." Quote: "...Generic Packet-Filter Ruleset...Keep in mind that these hints are for a single workstation-computer connected to the Internet..."
- Firewall Knowledgebase notably:
- DD-WRT Specific IPTables Info
- OpenWRT Advanced Firewall