firewall/ipt-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
151 Commits 1 Branch 0 Tags
f0187f041d063f6921ee9f5920fd2901427e3f3e
Commit Graph
51 Commits
Author SHA1 Message Date
chrisandClaude Opus 5.5 affa35def4 Limit of new TCP connections per source IP: configurable rate, drop only above the limit. 
- default_settings.conf: new default_limit_new_tcp_connections_per_seconds_rate=30.
- main_ipv{4,6}.conf.sample: new limit_new_tcp_connections_per_seconds_rate
  (burst is twice the rate; invalid or empty values fall back to the default).
- ipt-firewall-server, ip6t-firewall-server: the rule no longer ACCEPTs SYNs
  below the limit (which bypassed the service rules, destination IPs and the
  HTTP limits); like the HTTP limits it now only logs and drops SYNs above
  the limit (--hashlimit-above). Fallback without xt_hashlimit: chain
  syn-multi-limit with a global limit.
- ip6t-firewall-server: fix --hashlimit-srcmask (128 instead of 32), drop
  only the given ports instead of all new TCP connections, hashlimit names
  syn_multi_v6*, add the can_use_hashlimit check.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-11 18:50:58 +01:00
chris f6660709ce Enhance IPv6 ban functionality: add dynamic mask handling and prevent banning own addresses 2026-10-27 22:26:12 +01:00
chris fbe10b43d0 main_ipv4.conf.sample,main_ipv6.conf.sample: fix variablen namimg - change 'default_min_tcp6_mss_for_https_val' to 'min_tcp6_mss_for_https_valwq'. 2026-10-27 22:03:27 +01:00
chris 792d0b1b86 Configure limits for HTTPS connections. 2026-10-27 21:18:02 +01:00
chris 3418073003 Adjust mattermost service - fallback connection to STUN service via tcp. 2026-09-10 19:38:23 +02:00
chris ad136d2fdf main_ipv4.conf.sample,main_ipv6.conf.sample: Fix section Limit Connections - add limit_new_tcp_connections_per_seconds_ports. 2026-01-12 17:42:19 +01:00
chris a37b2c185b make firewall compartible with 'iptables-nf'. 2026-01-11 00:31:22 +01:00
chris 24d91d38c6 Add support for MNDP and mDNS traffic. 2025-02-16 18:40:50 +01:00
Christoph 877814caf0 Add support for aditional smtp ports - OUT AND IN. 2025-01-27 22:15:40 +01:00
chris dce357a3df /main_ipv4.conf.sample,main_ipv6.conf.sample: Change munin IP address. 2024-12-27 10:53:53 +01:00
chris f0e15b992b Fix error for not firewalled interfaces. 2024-12-24 17:16:35 +01:00
chris e7311a3963 Add Prometheus Service 2024-11-05 17:21:05 +01:00
chris 0eca4f3eaf main_ipv[46].conf.sample: add 'per_IP_connection_limit' parameter. 2024-09-26 15:21:17 +02:00
chris 830f48ff61 Add support for logging CGI script user. 2024-09-14 01:15:52 +02:00
chris 536aea7d97 change defaut value for '+do_not_firewall_lx_guest_systems' to false. 2023-05-02 21:37:47 +02:00
chris ff098ac058 Add rule to prevent LX containers from firewalld on host system. 2023-05-02 20:45:27 +02:00
chris a2ba79185d main_ipv6.conf.sample: change default value of 'mm_service_ips' to an empty one. 2023-01-24 18:17:01 +01:00
chris 486789c6b5 Add support for MatterMost (MM) service. 2023-01-24 17:42:27 +01:00
chris 0831f26891 Add support for WireGuard VPN Service. 2022-08-11 10:43:04 +02:00
chris 5ec7c9bcea Add support for dhclient. 2021-01-11 19:59:08 +01:00
chris e68705c819 some minor changes on file 'main_ipv6.conf.sample'. 2020-11-04 16:25:14 +01:00
chris bcdee40228 Changing rules for protection against several ddos attacks. 2020-10-28 20:57:08 +01:00
chris 498b34741c Add support for Portforwarding TCP/UDP using socat. 2020-06-03 14:10:27 +02:00
chris fbe1089099 add support for Jibri Streamin/Recording. 2020-05-16 13:42:22 +02:00
chris ac6845a8fd Merge branch 'master' of https://git.oopen.de/firewall/ipt-server 2020-04-27 21:43:42 +02:00
chris 2ebeae6479 Change default munin remote ip. 2020-04-27 21:43:14 +02:00
chris cf999b48fc Merge branch 'master' of git.oopen.de:firewall/ipt-server 2020-04-27 16:23:18 +02:00
chris 3627c5169b main_ipv[46].con: minor changes at comments for DND/Resolver Service. 2020-04-27 16:23:02 +02:00
chris 966a9dac6b Adjust some ports at files 'main_ipv4.conf.sample' and 'main_ipv6.conf.sample'. 2020-04-26 16:04:19 +02:00
chris df10be0d45 Add support fpr Jitsi Meet Authentication agains dovecot. 2020-04-26 10:16:32 +02:00
chris dcbe4605bc Add outgoing ports needed by jitsi service (discover public address fronm stun services). 2020-04-23 15:12:29 +02:00
chris 400adea8e3 Ajust jitsi_tcp_ports. 2020-03-21 19:30:34 +01:00
chris 450a9d5dcf Adjust support for TURN Server (NC App Talk). 2020-03-21 18:43:45 +01:00
chris 9f2764c0ae Add support for NCs Talk app with own stun/turn server. 2020-03-21 12:57:11 +01:00
chris 6ea1f594b8 Jitsi Video Conference Service: fix UDP Ports. 2020-03-17 23:17:20 +01:00
chris 93856c8fb3 Add Jitsi Video Conferencing Service. 2020-03-17 22:43:03 +01:00
chris e292be4141 Support local service from given extern network 2019-09-04 01:11:31 +02:00
chris 051e7da995 Add support for (local) dovecot auth service. 2019-09-03 17:54:46 +02:00
chris 328219c4b6 Support multiple networks for access to local resolver. 2019-09-03 03:49:24 +02:00
ckubu 1b35830610 Add support for XMPP (Jabber Prosody) Service 2019-09-02 01:05:22 +02:00
chris eaf4fb9a40 Some minor chanes on comments. 2019-09-01 21:24:07 +02:00
chris 8e85e893ad support Resolver for specified (local) network. 2019-09-01 20:57:16 +02:00
chris 142778c718 Support local NTP Server. 2019-09-01 17:29:54 +02:00
chris 70f62dc7fa main_ipv[4|6].conf.sample: minor changes on file comments. 2019-07-01 00:40:54 +02:00
chris b02ba8b8f2 main_ipv[4|6].conf.sample: minor changes on file comments. 2019-07-01 00:29:59 +02:00
chris 0daa7a9d40 main_ipv[4|6].conf.sample: monor changes on file comments. 2019-07-01 00:26:01 +02:00
chris 57d09ba98d Add file 'conf/default_ports.conf'. Remove file 'conf/ports.conf'. 2019-06-30 15:29:07 +02:00
chris 949a96cd34 Change default remote munin server ip. 2019-03-13 16:13:18 +01:00
chris c6de143b1e Reorganize ports for services, rename 'default_ports.conf' to 'ports.conf'. 2019-03-09 15:42:24 +01:00
chris 4967e6549d New: allow_all_outgoing_traffic (true/false) 2019-03-07 19:31:12 +01:00