Kategoriearchive: Firewall


redirect ports to remote

To redirect traffic from one port, you can either use iptables PREROUTING or – if need be only tcp – also rinted. Rinetd has the advantage that the setup is simpler. You only have to adjust the settings in /etc/rinetd.conf. To redirect. http and https: #source port destination port 176.9.24.113 […]


Apache bandwidth limit

my english version Durch mod_cband lässt sich die verfügbare Bandbreite von Apache nach verschiedenen Kriterien drosseln. Das Modul kann von http://cband.linux.pl/download/ oder auch von http://sourceforge.net/projects/cband/ heruntergeladen werden. Zum Installieren reicht wie üblich ./configure make make install Voraussetzung ist aber das APache eXtenSion tool. Die meisten Distributionen bieten mod_cband aber auch […]


fail2ban mit xt_recent 3

Fail2ban an sich is a very handy tool to keep out potential attacking. But it is sometimes unhandly when you just want to unlock a specific ip. I had almost forgotten about the issue until I have to get a comment. 😉 I am now writing the recent entries in […]


Block outdated clients 1

There can be problems with the destination file. A solution can be found in the post handle xt_recent from syslog-ng. Due to numerous connects of outdated clients on my clamav-mirror (> 300,000 / day), i add single IP temporarily to the firewall. Requirements: Apache HTTP-Server syslog-ng iptables Configure Apache HTTP-Server The Access […]