First page Back Continue Last page Overview Graphics
netfilter : a stateful firewall
Control unauthorized access to your computer over the network (sort of)
Netfilter is controlled by user space application iptables
iptables -L lists the current ruleset
netfilter can filter according to:
- Owner of process (allow certain users to do certain things)
- Source/destination IP/port (allow access only to public services)
- Rate of network traffic (guard against DoS)
- State (only allow packets from existing/related connections)
Logging (in /var/log/messages)
Notes: