firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
158 Commits 1 Branch 0 Tags
8058eedf613e2d01bd102fb45a69e63c4df3acc5
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
chris 8058eedf61 default_basic_behavior.conf: take of SYN FLOOD Rules. Disable SYN flood rule by default (IPv4 + IPv6) 
The global limit (1 SYN/s, burst 3, no per-source tracking) dropped
legitimate TCP connections to the gateway itself (up to ~45% on busy
gateways: DNS zone transfers, SSH, monitoring), and a few SYNs per
second were enough to lock out all TCP access. Kernel SYN cookies
(tcp_syncookies) already provide proper SYN flood protection.
 2026-10-30 22:22:03 +01:00
chris 75273e68bf conf/post_decalrations.conf: fix some logical errors. 2026-09-09 16:15:18 +02:00
chris cd25250624 Adjust firewall scripts to support NTP TCO/4460. 2026-09-09 15:43:30 +02:00
chris 76d60cae2a FIX handling NTP protocol. 2026-09-09 15:39:34 +02:00
chris 1ca7a6bf43 Fix errors setting '/proc/sys/net/ipv4/ip_dynaddr'. 2026-03-15 13:10:15 +01:00
chris e75665808e Set dynaddr_flag to '3' (instead of not defined value '5'). 2026-03-15 12:41:52 +01:00
chris 8622cee761 Forgot updateting firewall scripts. 2026-03-13 13:39:09 +01:00
chris 816673e601 Add support for MS SQL Datenbank Services. 2026-03-13 13:35:27 +01:00
chris c61a3cef4f Add some comments for RDP settings. 2026-03-11 14:18:30 +01:00
chris b84a7d8527 Add support for Remote Desktop Services (RDS). 2026-03-11 14:06:08 +01:00
chris 1f5c01d8c9 Its now possible to define port range at 'Allow extern service from given local network' instead of a single port. 2026-03-03 15:50:51 +01:00
chris a5b226284a Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway 2025-12-03 18:31:48 +01:00
chris bf7243caec ipt-firewall-gateway: fix error allowing DHCP requests: also consider unicast renewal requests. 2025-12-03 18:30:28 +01:00
chris a30a6f37d8 main_ipv4.conf.sample: changes in file comments. 2025-11-30 16:24:06 +01:00
chris 8b8060f0fa Add Support for IPMI access from outside. 2025-09-23 16:46:05 +02:00
chris b547d5dc0e Add some comments to interface konfiguration. 2025-08-03 11:41:55 +02:00
chris 01db31c39c Support IP range for 'Allow extern service'. 2025-05-23 12:44:02 +02:00
chris c2d62b72bd Add support for additional SMTP ports OUT. 2025-01-27 23:39:56 +01:00
chris 80bf02d7ad Add support for FreeIPA Service on local networks. 2024-08-17 22:19:12 +02:00
chris 06199517c7 ip6t-firewall-gateway,ipt-firewall-gateway: fix error replace '-dport' with '--dport'. 2024-06-24 15:11:14 +02:00
chris af41c79887 ip6t-firewall-gateway,ipt-firewall-gateway: add support for local mail relay hosts. 2024-05-06 17:39:02 +02:00
chris 4388ab6a68 Higher priority for allowing traffic from / to lo device. 2024-04-26 11:40:57 +02:00
chris 71e803388a Add China/Hon Long networks ti nan list. 2024-01-17 11:13:47 +01:00
chris 358a81cce9 Add support for speedtest. fix error txp/udp ports out. 2023-12-07 22:37:04 +01:00
chris 3052da6795 default_ports.conf: add port '8000' to 'standard_ip_camera_tcp_ports' variable. 2023-10-26 12:36:51 +02:00
chris 4c98319ddf Add support for restricted VPN networks. 2023-09-27 17:41:09 +02:00
chris c427d4fefd Add support for IP Camera. 2023-09-20 22:56:48 +02:00
chris 92acbfce17 Add support for ip-addresse, which have unlimited acces to inet but no access to (other) local networks - gaming devices.. 2023-06-08 15:31:32 +02:00
chris 0decc57848 Some minor changes.. 2023-02-11 16:02:49 +01:00
chris 372f1fb9f2 Fix typo - gameming -> gaming. 2023-02-11 15:38:51 +01:00
chris 4ade386634 Add MAC address filterimh for gamin devices 2023-02-11 15:15:10 +01:00
chris 63a8722a3e Some changes on unifi rules. 2022-11-21 21:01:01 +01:00
chris b0421b06c9 Fix error concernint in-/ou-ports for unifi devices. 2022-11-21 01:17:44 +01:00
chris a6c617a1ab some minor changes.. 2022-11-20 01:47:24 +01:00
chris d64f0f4b08 Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway 2022-11-13 02:40:08 +01:00
chris fa86a604d6 Modify gaming rules. 2022-11-13 02:36:50 +01:00
chris 9967a2dddc ip6t-firewall-gateway,ipt-firewall-gateway: add missing rules for wireguard VPN connection. 2022-11-11 10:56:34 +01:00
chris 338b2cf8d7 Adjust 'ip6t-firewall-gateway' and 'ipt-firewall-gateway'. Add forward rules for game ports if aliases in use. 2022-10-30 22:46:07 +01:00
chris 9fbc59fe09 conf/post_decalrations.conf: add ports of game 'Call of duty'. 2022-10-30 18:16:39 +01:00
chris ec050e7f7e default_ports.conf: add url for ports 'Call of Duty' to comments. 2022-10-30 02:00:52 +02:00
chris b7b2ad61cd Add support of Games 'Call of Duty'. 2022-10-30 01:07:18 +02:00
chris 9282609ebd main_ipv6.conf.sample:some minor changes. 2022-07-11 12:41:57 +02:00
chris 4de6f50e12 ipt-firewall-gateway: some minor changes at script output. 2022-06-09 00:12:16 +02:00
chris 4e4c041f9f default_ports.conf: adjust game ports (steam). 2022-04-01 19:36:33 +02:00
chris a8e60aa4a3 Fix error in firewall rules concerning unifi controller. 2022-03-30 23:41:23 +02:00
chris 8ce2787fee Change default values section 'Router IPv4'. 2022-03-29 01:07:19 +02:00
chris d8e0c8ddd7 Fix another error in section 'Protection against syn-flooding'. 2022-03-29 00:48:25 +02:00
chris ccb09d0095 Fix error in section 'Protection against syn-flooding'. 2022-03-29 00:40:48 +02:00
chris 783be30197 Adjust Rules concerning Unifi Controller. Add digfferent Parameters for block 'Protection against several attacks'. 2022-03-28 21:26:17 +02:00
chris 19bf795a99 Add rules for blocking UDP / TCP Ports exern out. 2022-03-18 18:19:43 +01:00
chris 52022cd6c7 Forward missing Spamcontrolports. 2022-03-09 04:02:00 +01:00
chris cdcb74ccac Declare arrays explizit as empty. 2022-02-26 00:04:06 +01:00
chris d6da484657 Add support for gane steam. 2022-02-25 23:28:30 +01:00
chris 3785871dad Rename bigbluebutton variable. 2022-02-10 23:31:04 +01:00
chris fb556bc381 Prevent duplicate rules. 2022-02-10 23:16:35 +01:00
chris 4cf9aba8a0 post_decalrations.conf: fix some minor errors. 2022-02-10 02:47:49 +01:00
chris b3fad29be3 fix some error concerning game ports. 2022-02-09 19:42:01 +01:00
chris 64b991f599 Add support for gaming. 2022-02-09 15:13:22 +01:00
chris 5c02b40a7c Fix some error concerning 'Microsoft Teams' management. 2022-02-02 22:41:09 +01:00
chris 9f5d640d67 Fix some error concerning 'Microsoft Teams' management. 2022-02-02 22:36:29 +01:00
chris d6db7fba77 ipt-firewall-gateway: Fix error at service 'Microsoft Teams'. 2022-02-02 22:00:54 +01:00
chris c8ba2dec8e conf/main_ipv4.conf.sample: fix error at 'MS Teams' settings. 2022-02-02 21:53:23 +01:00
chris 577eaa27c4 Add support for 'Skype for Business Online' and 'Microsoft Teams'. 2022-02-02 21:24:53 +01:00
chris 0f2676eea6 post_decalrations.conf: add missing array of wireguard interfaces 'wg_ifs_arr'. 2021-11-26 02:22:57 +01:00
chris b464b0c039 Add support for WireGuard. 2021-11-22 18:35:58 +01:00
chris 1d2d6a6fae Adjust Video and Streaming services. 2021-07-01 01:38:23 +02:00
chris c097136b33 Add Support for Streaming (Livestreaming) for most providers (YouTube, Linkedin,..). 2021-06-30 19:12:06 +02:00
chris 701655c193 Add support for ZOOM Meetings. 2021-06-09 16:38:34 +02:00
chris 75a5c40430 Adjust ports of BigBlueButton Video Service. 2021-06-07 11:59:05 +02:00
chris 5d8ef9a8f5 Adjust BigBlueButton TCP Ports out. 2021-06-07 11:31:30 +02:00
chris 8faab2827a main_ipv4.conf.sample: fix error: change variable name from 'jitsi_udp_port_range' to 'jitsi_udp_ports'. 2021-04-24 16:10:38 +02:00
chris 82f2e6486e Merge branch 'master' of git.oopen.de:firewall/ipt-gateway 2021-04-20 02:08:44 +02:00
chris a570445a32 main_ipv6.conf.sample: add 'allow_alfaview_video_conference_out' - was forgotten. 2021-04-20 02:08:32 +02:00
chris 83a50e5b56 Add support for masquerading udp and icmp connections. 2021-04-12 18:23:07 +02:00
chris d6cf429736 Change default ports for Unifi Controller and define them in file 'default_ports.conf'. 2021-03-23 11:14:18 +01:00
chris b005fff18f Add support for 'Webex Meeting'. 2021-03-18 20:32:18 +01:00
chris 5918f50bdb main_ipv4.conf.sample: some really minor changes. 2020-09-20 11:22:49 +02:00
chris 4b97303acd Add 'allow_to_ext_net' and 'allow_to_ext_service'. 2020-09-19 13:40:39 +02:00
chris a9961a5dde Fix comments for allow_all_ext_traffic_to_local_service IPv6. 2020-07-30 16:41:41 +02:00
chris 2b95b780ee Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway 2020-07-30 16:06:25 +02:00
chris f6db682d37 Add support for local service reachable from all extern networks. 2020-07-30 16:06:18 +02:00
chris 5a958fa332 Add support for Epson Network Scanner. 2020-07-26 21:08:04 +02:00
chris 0a2aba1f29 Add Video Conferencing System 'alfaview'. 2020-06-15 13:52:10 +02:00
chris 32048f3a35 Add suport for BigBlueButton video conference service. 2020-04-01 00:54:16 +02:00
chris fe55462803 Add support for NC's Talk App (only client). 2020-03-21 15:11:39 +01:00
chris 1eeb01411e Add Jitsi Video Conference Service out only. 2020-03-18 00:15:28 +01:00
chris b995c6c4e1 Add Mumble Service out (allow_mumble_request_out). 2020-03-09 13:44:44 +01:00
chris 0f72f2419a Some monor changes.. 2019-09-04 17:40:30 +02:00
chris e4775f2155 Fix error in creation a list of local IPv4/IPv6. Move this to firewall script 'ipt-firewall-gateway'/'ip6t-firewall-gateway'. 2019-09-04 13:27:54 +02:00
chris 626e167854 Fix error concerning unifi controller. 2019-08-01 18:06:46 +02:00
chris 14b72b2ad2 Add support for unifi devices outside internal network. 2019-08-01 17:22:48 +02:00
chris 8e94cdcd3b Add support or blocking UPnP traffic (in and out). 2019-07-09 20:17:53 +02:00
chris 39ec118374 Merge branch 'master' of https://git.oopen.de/firewall/ipt-gateway 2019-07-09 15:48:06 +02:00
chris f535a29ca6 Add: Allow all traffic from local ip to the internet 2019-07-09 15:47:48 +02:00
chris 42c14d90e8 default_ports.conf: set standard_cups_port to 631. 2019-07-09 02:22:43 +02:00
chris 837aeac025 Adjust default ports. 2019-06-30 15:27:39 +02:00
chris 45b144f416 Fix error concerning variable 'loopback' 2019-06-30 01:24:46 +02:00
chris bbffa0fabb Moved some default values (Port) from main_ipv[4|6] to default_ports.conf. 2019-06-30 00:17:57 +02:00
chris a74b57e0a0 add support for ulog daemon. 2019-06-29 17:20:59 +02:00
chris 07ffaea9a7 Add support for Checkmk monitoring service. 2019-06-20 14:06:00 +02:00