This website requires JavaScript.
f0187f041d
logging_ipv{4,6}.conf: detect ulogd2 via systemd instead of ps.
chris and Claude Opus 5.5
2026-11-11 23:17:04 +01:00
affa35def4
Limit of new TCP connections per source IP: configurable rate, drop only above the limit.
chris and Claude Opus 5.5
2026-11-11 18:50:58 +01:00
93d9af854b
ip6t-firewall-server,ipt-firewall-server: HTTP limits only for local webserver; fix several bugs.
chris and Claude Opus 5.5
2026-11-02 21:51:16 +01:00
9de4e742cd
ip6t-firewall-server,ipt-firewall-server,default_settings.conf: some changes in default values limiting http connections.
chris
2026-11-02 18:10:26 +01:00
57861cb8ec
Enhance spoofed packet handling: exclude loopback traffic in IP filtering
chris
2026-10-27 22:30:44 +01:00
f6660709ce
Enhance IPv6 ban functionality: add dynamic mask handling and prevent banning own addresses
chris
2026-10-27 22:26:12 +01:00
fbe10b43d0
main_ipv4.conf.sample,main_ipv6.conf.sample: fix variablen namimg - change 'default_min_tcp6_mss_for_https_val' to 'min_tcp6_mss_for_https_valwq'.
chris
2026-10-27 22:03:27 +01:00
3ad1807cda
default_settings.conf: fix variablen namimg - change 'default_min_tcp6_mss_for_https_val' to 'min_tcp6_mss_for_https_val'.
chris
2026-10-27 21:53:39 +01:00
792d0b1b86
Configure limits for HTTPS connections.
chris
2026-10-27 21:18:02 +01:00
560ee66b07
ip6t-firewall-server: Clamp the advertised MSS of incoming HTTPS SYN packets to 1360. ip6t-firewall-server,ipt-firewall-server: add some restrictions on HTTP connections to counteract attacks.
chris
2026-10-26 23:30:18 +01:00
3418073003
Adjust mattermost service - fallback connection to STUN service via tcp.
chris
2026-09-10 19:38:23 +02:00
06b5d5840b
Adjust '.claude/settings.json'.
chris
2026-06-29 16:44:43 +02:00
7f47bddc08
Add settings.json to define permissions for ansible operations
chris
2026-06-28 11:34:36 +02:00
85b1e4d2c6
deleted file 'post_decalrations.conf'.
chris
2026-01-19 16:51:33 +01:00
a5b66b755b
rename post_decalrations.conf -> post_declarations.conf; fix error in handling IPv4 'forward_private_ip_arr'. Fix error setting '/proc/sys/net/ipv4/conf/all/log_martians'.
chris
2026-01-19 16:43:40 +01:00
3d27513b81
ip6t-firewall-server: replace '-m statet --state ..' with '-m conntrack --ctstate ..'.
chris
2026-01-19 16:10:52 +01:00
73122fb0ce
ip6t-firewall-server: get rif of debug output/comments.
chris
2026-01-16 10:21:50 +01:00
b0804fdfaf
Support LX Container on SINMA systems.
chris
2026-01-16 01:40:23 +01:00
7dd1a17e10
Fix error handling bridge devices on host systems.
chris
2026-01-15 17:02:40 +01:00
16eb4d7e0f
ip6t-firewall-server: remove rule ' -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP'.
chris
2026-01-15 01:37:46 +01:00
5943f4d1a1
ip6t-firewall-server: a minor change in comments.
chris
2026-01-14 20:10:29 +01:00
b35a3f3261
Prepare ip6t-firewall-server for making nftables ready later on.
chris
2026-01-14 17:47:53 +01:00
cea43cd7fa
Make IPv4 firewall nftables ready.
chris
2026-01-14 17:46:20 +01:00
fd2d792d88
ip6t-firewall-server: Fis error.
chris
2026-01-12 20:11:32 +01:00
ad136d2fdf
main_ipv4.conf.sample,main_ipv6.conf.sample: Fix section Limit Connections - add limit_new_tcp_connections_per_seconds_ports.
chris
2026-01-12 17:42:19 +01:00
a37b2c185b
make firewall compartible with 'iptables-nf'.
chris
2026-01-11 00:31:22 +01:00
63889b0dc9
LDAP(S): forgot to configure ldap/ldaps standard ports.
chris
2025-08-10 01:56:31 +02:00
abef59c769
Allow LDAP/LDAPS out only.
chris
2025-08-10 01:50:23 +02:00
9fd36a8236
Add support for MNDP and mDNS traffic.
chris
2025-02-16 18:48:22 +01:00
24d91d38c6
Add support for MNDP and mDNS traffic.
chris
2025-02-16 18:40:50 +01:00
71e01e8413
logging_ipv[46].conf: add missing parameter 'log_blocked_ip'.
chris
2025-02-15 10:59:53 +01:00
aab8585d90
Fix error creating 'smtpd_additional_listen_port_arr'.
chris
2025-01-27 23:10:29 +01:00
e6984a622c
post_decalrations.conf: fix error creating array 'smtpd_additional_outgoung_port_arr'.
chris
2025-01-27 22:58:30 +01:00
409ace650e
Merge branch 'master' of https://git.oopen.de/firewall/ipt-server
Christoph
2025-01-27 22:18:55 +01:00
877814caf0
Add support for aditional smtp ports - OUT AND IN.
Christoph
2025-01-27 22:15:40 +01:00
54ce58a52e
replace 'default_ports.conf' with 'default_settings.conf'.
chris
2025-01-27 14:49:47 +01:00
40591462ce
Merge branch 'master' of https://git.oopen.de/firewall/ipt-server
chris
2024-12-27 17:27:57 +01:00
3d65233059
ipt-firewall-server: fix error at munin role.
chris
2024-12-27 17:27:28 +01:00
dce357a3df
/main_ipv4.conf.sample,main_ipv6.conf.sample: Change munin IP address.
chris
2024-12-27 10:53:53 +01:00
f0e15b992b
Fix error for not firewalled interfaces.
chris
2024-12-24 17:16:35 +01:00
e7311a3963
Add Prometheus Service
chris
2024-11-05 17:21:05 +01:00
0eca4f3eaf
main_ipv[46].conf.sample: add 'per_IP_connection_limit' parameter.
chris
2024-09-26 15:21:17 +02:00
830f48ff61
Add support for logging CGI script user.
chris
2024-09-14 01:15:52 +02:00
bbabeeab27
Add support for PGP/GPG Key server..
chris
2024-07-24 17:14:04 +02:00
1062208237
ip6t-firewall-server,ipt-firewall-server: move 'Loopback device generally allowed' to an earlier point in the script.
chris
2024-04-08 21:07:51 +02:00
d857756be7
ip6t-firewall-server: add '(end of firewall)' to the last reject rule.
chris
2024-04-06 03:20:27 +02:00
b183770b91
forgot 'updating conf/include_functions.conf' file.
chris
2024-04-04 19:22:08 +02:00
e6566bafeb
Some changes in per IP Connection Limit.
chris
2024-04-04 18:57:36 +02:00
2532b116b8
Support user settings for sourvce IP connection limit - ff.
chris
2024-04-04 18:34:28 +02:00
738809ba95
Support user settings for sourvce IP connection limit.
chris
2024-04-04 15:17:31 +02:00
7c00c7783c
Add China/Hon Long networks ti nan list.
chris
2024-01-17 11:10:41 +01:00
ce0ee2d243
Add variables for lx guest system ip's.
chris
2023-05-02 22:26:40 +02:00
8e64cc36ac
some minor changes..
chris
2023-05-02 21:45:43 +02:00
536aea7d97
change defaut value for '+do_not_firewall_lx_guest_systems' to false.
chris
2023-05-02 21:37:47 +02:00
ff098ac058
Add rule to prevent LX containers from firewalld on host system.
chris
2023-05-02 20:45:27 +02:00
a2ba79185d
main_ipv6.conf.sample: change default value of 'mm_service_ips' to an empty one.
chris
2023-01-24 18:17:01 +01:00
486789c6b5
Add support for MatterMost (MM) service.
chris
2023-01-24 17:42:27 +01:00
9f016b1776
Add support for routing networks through wireguard connections.
chris
2022-08-12 01:16:53 +02:00
0831f26891
Add support for WireGuard VPN Service.
chris
2022-08-11 10:43:04 +02:00
2d07d39a55
allow those ssh ports out, which are also allowed for incoming traffic.
chris
2021-10-26 11:02:59 +02:00
c78edd01be
Drop traffic on extern interfaces iinto private networks.
chris
2021-09-02 12:07:25 +02:00
c65e0102ae
ipt-firewall-server/ip6t-firewall-server: change order for 'Restrict Service/Net to..'.
chris
2021-08-20 01:33:47 +02:00
5ec7c9bcea
Add support for dhclient.
chris
2021-01-11 19:59:08 +01:00
e68705c819
some minor changes on file 'main_ipv6.conf.sample'.
chris
2020-11-04 16:25:14 +01:00
e1047e9c47
Some more or less minor changes..
chris
2020-10-30 15:00:46 +01:00
35d3ffeded
Some minor changes..
chris
2020-10-30 13:56:34 +01:00
c8b7e9b0f5
change rules and location of rules for 'Allow forwarding (private) IPs'.
chris
2020-10-30 11:59:38 +01:00
96b3e162fe
Fix error droping ICMP packets. fix error dropping private networks.
chris
2020-10-29 12:55:59 +01:00
bcdee40228
Changing rules for protection against several ddos attacks.
chris
2020-10-28 20:57:08 +01:00
498b34741c
Add support for Portforwarding TCP/UDP using socat.
chris
2020-06-03 14:10:27 +02:00
53de5746cf
Support Streaming via YouTube.
chris
2020-05-17 17:56:23 +02:00
c695a63372
ip6t-firewall-server,ipt-firewall-server: add rtp port for jibri (jitsi client) service.
chris
2020-05-17 04:20:13 +02:00
fbe1089099
add support for Jibri Streamin/Recording.
chris
2020-05-16 13:42:22 +02:00
b24dcf0a3d
load_modules_ipv6.conf: load module 'br_netfilter'.
chris
2020-04-30 10:40:01 +02:00
ac6845a8fd
Merge branch 'master' of https://git.oopen.de/firewall/ipt-server
chris
2020-04-27 21:43:42 +02:00
2ebeae6479
Change default munin remote ip.
chris
2020-04-27 21:43:14 +02:00
cf999b48fc
Merge branch 'master' of git.oopen.de:firewall/ipt-server
chris
2020-04-27 16:23:18 +02:00
3627c5169b
main_ipv[46].con: minor changes at comments for DND/Resolver Service.
chris
2020-04-27 16:23:02 +02:00
966a9dac6b
Adjust some ports at files 'main_ipv4.conf.sample' and 'main_ipv6.conf.sample'.
chris
2020-04-26 16:04:19 +02:00
3f3b4c3c76
Settings for default ports 'dovecot_service_external_auth_port' and 'default_jitsi_dovecout_auth_port'.
chris
2020-04-26 15:53:41 +02:00
df10be0d45
Add support fpr Jitsi Meet Authentication agains dovecot.
chris
2020-04-26 10:16:32 +02:00
dcbe4605bc
Add outgoing ports needed by jitsi service (discover public address fronm stun services).
chris
2020-04-23 15:12:29 +02:00
400adea8e3
Ajust jitsi_tcp_ports.
chris
2020-03-21 19:30:34 +01:00
450a9d5dcf
Adjust support for TURN Server (NC App Talk).
chris
2020-03-21 18:43:45 +01:00
9f2764c0ae
Add support for NCs Talk app with own stun/turn server.
chris
2020-03-21 12:57:11 +01:00
6ea1f594b8
Jitsi Video Conference Service: fix UDP Ports.
chris
2020-03-17 23:17:20 +01:00
9d8983713c
Adjust firewall scripts to support Jitsi Video Conferencing Service.
chris
2020-03-17 22:59:01 +01:00
93856c8fb3
Add Jitsi Video Conferencing Service.
chris
2020-03-17 22:43:03 +01:00
5ea1b0acbd
DNS 'ANY' request uses TCP port. So allow DNS TCP requests for 'resolver_allowed_network_arr'.
chris
2020-02-19 14:03:16 +01:00
1fc3da67f8
ip6t-firewall-server: fix error at 'allow_local_service' - separator was wrong.
Christoph
2019-09-22 23:39:44 +02:00
e292be4141
Support local service from given extern network
chris
2019-09-04 01:11:31 +02:00
051e7da995
Add support for (local) dovecot auth service.
chris
2019-09-03 17:54:46 +02:00
f87f7bbda0
Support multiple networks for access to local resolver - forgot iptables scripts.
chris
2019-09-03 03:52:54 +02:00
328219c4b6
Support multiple networks for access to local resolver.
chris
2019-09-03 03:49:24 +02:00
1b35830610
Add support for XMPP (Jabber Prosody) Service
ckubu
2019-09-02 01:05:22 +02:00
eaf4fb9a40
Some minor chanes on comments.
chris
2019-09-01 21:24:07 +02:00
2665010eb3
support Resolver for specified (local) network. Part 2
chris
2019-09-01 20:59:38 +02:00
8e85e893ad
support Resolver for specified (local) network.
chris
2019-09-01 20:57:16 +02:00
142778c718
Support local NTP Server.
chris
2019-09-01 17:29:54 +02:00
70f62dc7fa
main_ipv[4|6].conf.sample: minor changes on file comments.
chris
2019-07-01 00:40:54 +02:00
chrisandClaude Opus 5.5
Christoph
Christoph
ckubu
