Freaks City

Scenario A Docker container exposes a service on a specific port. The goal is to restrict access to this port so that only specific remote hosts are permitted, while all others are denied. Background: Traffic Flow in Docker When Docker runs, it modifies the host's iptables rules. External traffic destined for a container does not pass through t ...

Firewall Configuration To allow Redis traffic through the firewall, add a rule for port 6379: iptables -I INPUT -p tcp --dport 6379 -j ACCEPT service iptables save Installation Steps Navigate to the download directory: cd /usr/local/src Download the Redis source package (example version 3.2.9): wget http://download.redis.io/releases/red ...

A common threat for any publicly reachable Linux server is the relentless scanning and brute‑force attempts against the default SSH port (22). Attackers use automated tools to try thousands of username/password combinations, often exhausting system resources and potentially gaining access through weak credentials. This guide outlines a practica ...

iptables Firewall Setup Installing iptables Check current status: systemctl status iptables Stop and disable firewall service: systemctl stop firewalld systemctl disable firewalld Install iptables components: yum install -y iptables iptables-services systemctl start iptables systemctl enable iptables Configuration File Edit the main configur ...

Securing Linux servers against volumetric and application-layer threats requires precise firewall rule implementation. The following configurations demonstrate how to deploy lightweight SYN flood prtoection, concurrent connection caps, and rate-based filtering to neutralize DDoS and Challenge Collapsar (CC) attacks. 1. DDoS Mitigation Strategie ...

Introduction iptables is a classic command-line utility used by Linux administrators to configure IPv4 packet filtering rules and Network Address Translation (NAT). While it may be considered legacy compared to modern firewall solutions like firewalld, it remains widely used and essential knowledge for system administrators. It's important to n ...

Prerequisites RK3568 or RK3588 development board Ubuntu or Debian operating system AP6275S Wi-Fi module (or compatible) Setting Up Hostapd for AP Mode Install Hostapd sudo apt update sudo apt install hostapd Configure Hostapd Create the configurasion file at /etc/hostapd/hostapd.conf: interface=wlan0 driver=nl80211 ssid=EmbeddedAP hw_mode=a ...

Package Installation Begin by updating the package index and installing the core WireGuard utilities alongside a DNS resolver manager to handle dynamic DNS updates across the tunnel. sudo apt update sudo apt install wireguard openresolv -y Cryptographic Key Generation Navigate to the configuration directory, restrict file permissions, an ...

Resolving nf_conntrack Table Full Packet Drops Overview The nf_conntrack table is typically located in the /proc/net directory and appears only when the firewall is active. This table records connection states for firewall rules. To examine the nf_conntrack table: cat /proc/net/nf_conntrack ipv4 2 tcp 6 86 TIME_WAIT src=10.16.104. ...