This iptables script manage the rules insertion in the running kernel and launches ipfreeze.pl. This perl script listens on the netlink device for packets that are passed by the firewall (QUEUE target). If a packet is sent, ipfreeze get the source IP and insert a new rule in the firewall that will destroy every packets coming from that IP. This rule is automatically removed after a user-definable period (usually 10 or 20min).
With this system, Yaffl proposes you features as :
- Protection from floods (like syn or ping floods)
- basic anti-nmap ports detection
- whitelist and permanent blacklist
- forbidden ports (why should someone connect to the telnet port of a firewall mmmh ?)
- Masquerading and dNAT to share your internet access.
[^] # Re: Qualité de la Mandrake MultiNetwork Firewall
Posté par Nitchevo (site web personnel) . En réponse au journal Qualité de la Mandrake MultiNetwork Firewall. Évalué à 1.
J'utilise une debian comme passerelle sur laquelle j'ai installé yaffl:
http://savannah.nongnu.org/projects/yaffl/(...)
This iptables script manage the rules insertion in the running kernel and launches ipfreeze.pl. This perl script listens on the netlink device for packets that are passed by the firewall (QUEUE target). If a packet is sent, ipfreeze get the source IP and insert a new rule in the firewall that will destroy every packets coming from that IP. This rule is automatically removed after a user-definable period (usually 10 or 20min).
With this system, Yaffl proposes you features as :
- Protection from floods (like syn or ping floods)
- basic anti-nmap ports detection
- whitelist and permanent blacklist
- forbidden ports (why should someone connect to the telnet port of a firewall mmmh ?)
- Masquerading and dNAT to share your internet access.
Voili