<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>k3mist™ &#187; iptables</title>
	<atom:link href="http://k3mist.com/tag/iptables/feed/" rel="self" type="application/rss+xml" />
	<link>http://k3mist.com</link>
	<description>Development, Design &#38; System Administration</description>
	<lastBuildDate>Sun, 14 Nov 2010 21:36:36 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.5</generator>
		<item>
		<title>Limit the amount of connections to any port with iptables</title>
		<link>http://k3mist.com/linux/limit-the-amount-of-connections-to-any-port-with-iptables/</link>
		<comments>http://k3mist.com/linux/limit-the-amount-of-connections-to-any-port-with-iptables/#comments</comments>
		<pubDate>Sat, 13 Nov 2010 21:40:26 +0000</pubDate>
		<dc:creator>k3mist</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[connection limit]]></category>
		<category><![CDATA[ddos]]></category>
		<category><![CDATA[iptables]]></category>
		<category><![CDATA[mail server]]></category>
		<category><![CDATA[port]]></category>
		<category><![CDATA[postfix]]></category>

		<guid isPermaLink="false">http://k3mist.com/?p=316</guid>
		<description><![CDATA[This morning we had a DDOS attack on our mail server. Some @$$ trying to swamp our postfix service with hundreds of connections. SO, I did something I did not want to do, but, oh well. This following bit below will explain a few things and will allow you to limit the amount of active [...]]]></description>
		<wfw:commentRss>http://k3mist.com/linux/limit-the-amount-of-connections-to-any-port-with-iptables/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Howto prevent and block repeat failed connections to ssh with iptables</title>
		<link>http://k3mist.com/linux/howto-prevent-and-block-repeat-failed-connections-to-ssh-with-iptables/</link>
		<comments>http://k3mist.com/linux/howto-prevent-and-block-repeat-failed-connections-to-ssh-with-iptables/#comments</comments>
		<pubDate>Sat, 08 Aug 2009 13:07:06 +0000</pubDate>
		<dc:creator>k3mist</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[iptables]]></category>
		<category><![CDATA[ssh]]></category>

		<guid isPermaLink="false">http://k3mist.com/?p=152</guid>
		<description><![CDATA[The following iptable entries will prevent and block repeat failed connections, but not permanently. This allows two new connections every 60 seconds. This is an effective way of blocking automated attacks you will see mostly from Chinese ISP&#8217;s. iptables -A INPUT -p tcp -m tcp -m state -m recent ! -s 10.0.0.0/24 -i eth0 --dport [...]]]></description>
		<wfw:commentRss>http://k3mist.com/linux/howto-prevent-and-block-repeat-failed-connections-to-ssh-with-iptables/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Howto allow outgoing ftp connections in iptables</title>
		<link>http://k3mist.com/linux/howto-allow-outgoing-ftp-connections-in-iptables/</link>
		<comments>http://k3mist.com/linux/howto-allow-outgoing-ftp-connections-in-iptables/#comments</comments>
		<pubDate>Thu, 30 Jul 2009 18:24:55 +0000</pubDate>
		<dc:creator>k3mist</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[ftp]]></category>
		<category><![CDATA[iptables]]></category>
		<category><![CDATA[php]]></category>

		<guid isPermaLink="false">http://k3mist.com/?p=149</guid>
		<description><![CDATA[From terminal, execute the following; sudo modprobe ip_nat_ftp ports=21 sudo modprobe ip_conntrack_ftp sudo iptables -A FORWARD -m state --state ESTABLISHED -j ACCEPT sudo iptables -A FORWARD -p tcp -m tcp -m state --dport 21 --state NEW -j ACCEPT sudo iptables -A FORWARD -p tcp -m tcp -m state --sport 20 --state RELATED -j ACCEPT sudo [...]]]></description>
		<wfw:commentRss>http://k3mist.com/linux/howto-allow-outgoing-ftp-connections-in-iptables/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

