Peter Thurner | Blunix GmbH via Shorewall-users skrev den 2024-02-28
17:49:
Hello shorewall users,
is there a way to ignore failing rules in shorewall, specifically if
/etc/shorewall/rules contains something like
ACCEPT local pub:this.domain.doesnt.exist.com tcp 443
iptables is not dns based with random ips
stable firewalls should be based on very stable ips
https://sys4.de/blog/abwehr-des-botnets-pushdo-cutwail-ehlo-ylmf-pc-mit-iptables-string-recent-smtp/
this what iptalbes can do
i have forgot how to add this rules to shorewall, hope some will show it
again
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users