#Netfilter

[nixcraft]

Linux host firewall:

nftables - low-level way to manage the firewall on modern distros. It is a replacement for iptables

iptables- legacy firewall

East to use fronted - manage your nftables or iptables using GUI, CLI, or web fronted. Typical examples are ufw, gufw, Guarddog, FWBuilder, firewalld, firewall-config, etc. Both nftables & IPtables are part of Netfilter. For most users, choosing fronted, such as ufw command or firewalld is recommended.

OR

[hackeocafe]

Linux Administration: The Complete Linux Bootcamp for 2024

This Linux Administration course covers every major topic, including using AI and Natural Language to administer Linux systems (ChatGPT & ShellGPT), all important Linux commands, the Linux Filesystem, File Permissions, Process Management, User Account Management, Software Management, Networking in Linux, System Administration, Bash Scripting, Containarizing Apps with Podman, Iptables/Netfilter Firewall, Linux Security and many more!

I’m constantly updating the course to be the most comprehensive, yet straightforward, Linux Administration course on the market!

This course IS NOT like any other Linux Administration course you can take online. At the end of this course, you will MASTER the key concepts and you will become an effective Linux System Engineer or Administrator.

This is a brand new Linux Administration course that is constantly updated to teach you the skills required for the future that comes.

The world is changing, constantly, and at a fast pace! The technology-driven future in which we’ll live is filled with promise but also challenges. Linux powers the servers of the Internet and by enrolling in this course you’ll power the essential Linux concepts and commands. This Linux Administration course is really different! You’ll learn what matters and get the skills to get ahead and gain an edge.

[kenidur1561]

Netfilter

ur government assigned gender for the day is the first thing u get when u click this link to a randomised wikipedia article. NO REROLLS . i am the  trollsteineggje mountain in norway

[globalresourcesvn]

Lỗ hổng trong Linux Kernel cho phép thực thi mã và leo thang đặc quyền (CVE-2024-53141)

Lỗ hổng trong Linux Kernel cho phép thực thi mã và leo thang đặc quyền (CVE-2024-53141) #LinuxKernel #BảoMật #CVE202453141 #LỗHổng Một lỗ hổng nghiêm trọng đã được phát hiện trong Linux Kernel, ảnh hưởng đến các phiên bản từ v2.7 đến v6.12. Lỗ hổng này nằm trong thành phần ipset của netfilter, cụ thể là trong hàm bitmap_ip_uadt(). Khi tham số IPSET_ATTR_IP_TO không có mặt nhưng IPSET_ATTR_CIDR…

[tumnikkeimatome]

nftables、iptables、ufwの違いと使い分け：Linuxファイアウォールの選び方

はじめに Linuxシステムにおけるネットワークセキュリティの要となるファイアウォール。 代表的なツールとして、nftables、iptables、ufwが挙げられます。 それぞれの特徴や使い方を理解することで、自身の環境に最適な選択が可能になります。 本記事では、これら3つのファイアウォールツールを比較し、それぞれの利点やユースケースを詳しく解説します。 nftables、iptables、ufwの基本概要 nftables、iptables、ufwはすべてLinuxカーネルのネットワークフィルタリング機能であるNetfilterを利用したツールです。 ただし、それぞれ設計思想や用途が異なります。 以下では、それぞれの基本的な特徴を紹介します。 nftablesとは nftablesは、Linuxカーネル3.13で導入された比較的新しいファイアウォールフレームワークです。 IPv4とI…

[tipsonunix]

How to Install Linux Kernel 6.4 on Ubuntu 22.04 & Linux Mint 21: A Comprehensive Guide

In this tutorial, we will walk you through the steps on how to install Linux Kernel 6.4 on Ubuntu 22.04 LTS and Linux Mint 21.

Introduction

Linux kernel is the core of the Linux operating system. It is responsible for managing the hardware, scheduling tasks, and providing a platform for running applications. Linux Kernel 6.4 has been recently released, bringing with it a range of new features, improvements, and bug fixes. As per Linus Torvalds Hmm. Final week of 6.4 is done, and we've mainly got some netfilter fixes, some mm reverts, and a few tracing updates. There's random small changes elsewhere: the usual architecture noise, a number of selftest updates, some filesystem fixes (btrfs, ksmb), etc. Most of the stuff in my mailbox the last week has been about upcoming things for 6.5, and I already have 15 pull requests pending. I appreciate all you proactive people.

Understanding the Importance of Kernel Updates

- Improved stability: Kernel updates can fix bugs that can cause instability in your operating system. This can lead to crashes, freezes, and other unexpected behavior. - Enhanced security: Kernel updates can patch vulnerabilities that could be exploited by hackers to gain unauthorized access to your system. - Increased performance: Kernel updates can optimize system performance by making better use of your hardware resources. This can lead to faster boot times, smoother application performance, and better battery life. - New features: Kernel updates can introduce new features that can make your operating system more powerful and versatile. For example, recent kernel updates have added support for new hardware, improved filesystem performance, and introduced new security features. What's New in Linux Kernel 6.4? - Intel Lunar Lake HD audio support: - Better MSI laptop support. - SELinux runtime disable the feature. - SLOB memory allocator removed - Linus cleaned up x86 memory copy code

How to Install Linux Kernel 6.4 On Ubuntu / Linux Mint?

Step 1: Update the system before proceeding to install kernel 6.4 sudo apt update && sudo apt upgrade Step 2: Download the mainline kernel packages for Kernel 6.4 using the below commands wget https://kernel.ubuntu.com/~kernel-ppa/mainline/v6.4/amd64/linux-headers-6.4.0-060400_6.4.0-060400.202306271339_all.deb wget https://kernel.ubuntu.com/~kernel-ppa/mainline/v6.4/amd64/linux-headers-6.4.0-060400-generic_6.4.0-060400.202306271339_amd64.deb wget https://kernel.ubuntu.com/~kernel-ppa/mainline/v6.4/amd64/linux-image-unsigned-6.4.0-060400-generic_6.4.0-060400.202306271339_amd64.deb wget https://kernel.ubuntu.com/~kernel-ppa/mainline/v6.4/amd64/linux-modules-6.4.0-060400-generic_6.4.0-060400.202306271339_amd64.deb Step 3: Install the kernel deb files sudo dpkg -i *.deb Step 4: Validate the kernel Once installation is completed reboot the server and verify the newly installed kernel by running the below command or running the neofetch command will print the newer kernel. uname -r

Conclusion

From this tutorial, you have learned how to download and install Linux kernel 6.4 on Ubuntu 22.04 and Linux Mint Do let us know your comments and feedback in the comments section below. If my articles on TipsonUNIX have helped you, kindly consider buying me a coffee as a token of appreciation

Thank You for your support!! Read the full article

[sololinuxes]

nftables vs IPtables

nftables vs IPtables. IPtables es la herramienta por excelencia en línea de comandos, que nos permite configurar de manera sencilla las reglas de firewall (normalmente se combina con una interfaz, pero no es necesario). IPtables es capaz de inspeccionar, modificar o eliminar paquetes de la red. Las tablas de iptables se componen de cadenas que contienen lo que se conoce como las "reglas de IPtables". Las reglas se procesan por el orden definido, para que me entiendas mejor, son condicionantes que nosotros o el sistema hemos definido previamente y que deben cumplirse estrictamente de forma que coincidan con la acción definida al ejecutarse. Todos los paquetes entrantes, independientemente de la fuente son procesados ​​por las mismas reglas. Las tablas de IP contienen cinco tablas estándar (raw, filter, NAT, mangle, security), aunque las más utilizadas son dos (NAT y sobre todo filter). Bueno, eso es IPtables, pero ¿qué es nftables? Nftables al igual que IPtables es desarrollado por netfilter y básicamente es una herramienta de filtrado de paquetes, que fue creado para sustituir a IPtables porque estas tenían algún problema en aspectos como el rendimiento y la escalabilidad. nftables se agrego al kernel de Linux en 2014, por tanto desde la versión 3.13 esta incluido en el.

nftables vs iptables comparativa  

nftables vs IPtables

nftables es aun más fácil de utilizar que IPtables, y como no podría ser de otra manera se combina con todas sus herramientas, por ejemplo, iptables, ip6tables, arptables, etc..., pero todo ello en una sola herramienta. La sintaxis es mejor y más simple, pero no te preocupes por que es totalmente compatible (puedes seguir usando la sintaxis de IPtables). Aunque nftables hace el mismo trabajo que IPtables, su arquitectura no se parece en nada. Destacamos que a diferencia de IPtables, nftables no crea tablas, ni cadenas, ni reglas de manera predeterminada (eso lo tienes que tener claro). Otro detalle importante de nftables es que permite hacer multiples acciones en una sola regla. Un ejemplo de la sintaxis de nftables: nft add rule ip filter output ip daddr 192.168.0.1 drop Con las iptables sería... iptables -A OUTPUT -d 192.168.0.1 -j DROP nftables no solo es más fácil de escribir, sino que el filtrado también es mucho más eficiente trabajando directamente desde el kernel. Después de todo lo dicho, deberíamos todos replantearnos el uso de nftables en vez de IPtables. Ademas si ya tienes un servidor en producción que trabaja con iptables, debes saber que existe una herramienta llamada "iptables-translate" que te ayudara enormemente a migrar de IPtables a nftables. Dado que este tema suscita un interés general, en el próximo articulo profundizaremos aun más en "nftables".   En Sololinux.es seguimos creciendo gracias a nuestros lectores, puedes colaborar con el simple gesto de compartir nuestros artículos en tu sitio web, blog,  foro o redes sociales.   Read the full article

[cyber-sec]

New Linux kernel NetFilter flaw gives attackers root privileges

Source: https://www.bleepingcomputer.com/news/security/new-linux-kernel-netfilter-flaw-gives-attackers-root-privileges/

More info:

https://www.openwall.com/lists/oss-security/2023/05/08/4

https://nvd.nist.gov/vuln/detail/CVE-2023-32233

[makeiteasyforabird]

Netfilter was written by Rusty Russell and has been in Linux since version 1.0 although at that stage it was a rewrite of pf from NetBSD.

james Turnbull, in Hardening Linux

[datamount-blog]

Introduction to IPTables

This guide is meant as an introduction to iptables and covers basic packet filtering using this tool on Centos 7. The goal is to learn to work with some basic options so you can adapt them to your particular needs. For this reason we will not cover any iptables extensions in this guide. Getting Started

The term iptables is used to define the Linux kernel firewall, part of the Netfilter project…

[nixcraft]

Read more: Linux iptables command examples for new sysadmins

[hackernewsrobot]

Linux kernel use-after-free in Netfilter, local privilege escalation

https://seclists.org/oss-sec/2023/q2/133 Comments

[ericvanderburg]

A Linux NetFilter kernel flaw allows escalating privileges to ‘root’

http://i.securitythinkingcap.com/SnnNPt

[computingpostcom]

In this tutorial, we will look at how to... https://www.computingpost.com/install-and-configure-firewalld-on-debian-10-11/?feed_id=18306&_unique_id=636cef32bcb09

[cadkilop]

Open gui firewall builder linux

#OPEN GUI FIREWALL BUILDER LINUX MAC OS X#

This rule is designed to assure that ssh session over which installer activates new policy does not break or hang. O Administrator can easily define ip address of the management workstation and Firewall Builder will automatically add rule to ensure that ssh access from it to the firewall is always permitted. O It enforces policy structure that denies all traffic by default and only permits what is necessary. * Firewall Builder implements many best practices in firewall policy design and firewall management procedures. Yet, it creates configuration for all supported firewall platforms in their standard format, which makes it easy to integrate with existing automation scripts. You can create configuration, track its changes using built-in revision control system and deploy it to one or several firewall machines. * All configuration management operations can be performed from one central place, Firewall Builder GUI. This provides for both consistent policy management solution for heterogeneous environments and possible migration path. * Being truly vendor-neutral, Firewall Builder can generate configuration file for any supported target firewall platform from the same policy created in its GUI.

#OPEN GUI FIREWALL BUILDER LINUX MAC OS X#

The program runs on Linux, FreeBSD, OpenBSD, Windows and Mac OS X and can manage both local and remote firewalls. Both network administrators and hobbyists managing firewalls with policies more complex that is allowed by simple web based UI can simplify management tasks with the application. Top Software Keywords Show more Show lessįirewall Builder is a GUI firewall configuration and management tool that supports iptables (netfilter), ipfilter, pf, ipfw, Cisco PIX (FWSM, ASA) and Cisco routers extended access lists.

[cyber-sec]

Microsoft signed a malicious Netfilter rootkit

Source: https://www.gdatasoftware.com/blog/microsoft-signed-a-malicious-netfilter-rootkit