Board logo

標題: Linux firewalls —— 你的firewall是怎样建设呢？ [打印本頁]
作者: 角色    時間: 2012-11-17 09:54     標題: Linux firewalls —— 你的firewall是怎样建设呢？

本帖最後由 角色 於 2019-2-27 19:35 編輯

为了建立好的firewalls基础知识，所以我从新整理过这幅帖子。在还没有讨论firewalls的建立，我们先收集一下关于一些Linux firewalls的资料，方便参考和讨论。
作者: 角色    時間: 2012-11-17 09:54

本帖最後由 角色 於 2019-2-27 20:03 編輯

From [1], I got two references [2,3]。 Reference [2] is the primary source for building up firewalls using iptables commands.

Ref. [4] provides a very brief introduction of firewall using iptables commands.

Ref. [5] also shows that iptables commands are the most popular firewall commands used in Linux systems. There is a packet flow diagram showing the details of packet flows.

If you can find the book name Linux Firwalls [B1], which will give you an overviews of what Linux Firewalls are.
References：
[1] https://www.tecmint.com/open-sou ... -for-linux-systems/
[2] https://www.netfilter.org/projects/iptables/
[3] https://www.tecmint.com/basic-gu ... wall-tips-commands/
[4] https://opensource.com/article/18/9/linux-iptables-firewalld
[5] http://www.linuxandubuntu.com/ho ... use-linux-firewalls

Books
[B1] Linux Firewalls, written by Michael Rash 2007, Download Link
作者: 角色    時間: 2012-11-17 09:55

本帖最後由 角色 於 2019-3-3 17:40 編輯

Ref. 1 provides a very good reference for building up firewall rules based on different requirements.

Ref. 2 provides a complete of example for firewalls.

Ref. 3 provides examples of using iptables.

Ref. 4. provides a very good examples of rules used in Debian system.

Ref. 5. gives examples.

Ref. 6 is the best reference that I often read.

References:
[1] https://www.digitalocean.com/com ... -rules-and-commands
[2] https://www.lammertbies.nl/comm/info/iptables.html
[3] https://www.thegeekstuff.com/201 ... m_source=feedburner
[4] https://wiki.debian.org/DebianFirewall
[5] https://www.cyberciti.biz/tips/linux-iptables-examples.html
[6] https://www.booleanworld.com/depth-guide-iptables-linux-firewall/
作者: 角色    時間: 2012-11-17 09:57

Reserved for contents
作者: 角色    時間: 2012-11-17 09:59

Reserved for contents
作者: 角色    時間: 2012-11-17 10:09

Reserved for contents
作者: 角色    時間: 2012-11-17 10:12

Reserved for contents
作者: 角色    時間: 2012-11-17 10:14

Reserved for contents
作者: 角色    時間: 2012-11-17 10:17

Reserved for contents
作者: 角色    時間: 2012-11-17 10:19

Reserved for contents
作者: 角色    時間: 2012-11-17 10:19

Reserved for contents
作者: 角色    時間: 2012-11-17 10:21

Reserved for contents
作者: 角色    時間: 2012-11-17 10:22

Reserved for contents
作者: 角色    時間: 2012-11-17 10:24

Reserved for contents
作者: 角色    時間: 2012-11-17 10:27

Reserved for contents
作者: 角色    時間: 2012-11-17 10:28

Reserved for contents
作者: 角色    時間: 2019-2-27 19:27

哈哈七年了都没有写过东西的帖子，这次为了学好建立firewalls，我都是从Linux开始，因为很多device的GUI都源自于Linux，例如MikroTik routers。
作者: 角色    時間: 2019-3-2 20:40

我看很多Router的firewall and nat都是源自于Linux firewall and nat，所以认真理解Linux 的firewall and nat对其他router有非常大的帮助。



歡迎光臨 電訊茶室 (http://telecom-cafe.com/forum/) Powered by Discuz! 7.2