Peter Thurner | Blunix GmbH via Shorewall-users skrev den 2024-02-28 17:49:
Hello shorewall users,

is there a way to ignore failing rules in shorewall, specifically if /etc/shorewall/rules contains something like

ACCEPT local pub:this.domain.doesnt.exist.com tcp 443

iptables is not dns based with random ips

stable firewalls should be based on very stable ips

https://sys4.de/blog/abwehr-des-botnets-pushdo-cutwail-ehlo-ylmf-pc-mit-iptables-string-recent-smtp/

this what iptalbes can do

i have forgot how to add this rules to shorewall, hope some will show it again






_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to