Slackware rc.firewall (with logging) script

mRgOBLIN · 06-21-2011, 03:25 AM

Quote:

Originally Posted by Penthux

When constructive criticism becomes a metaphor I try to focus on the productive and ignore the superfluous.

Along with sensible advice =)

tuxrules · 06-21-2011, 11:51 AM

Quote:

Originally Posted by pwc101

How will this play with fail2ban, which dynamically changes rules based on logfile analysis?

Not sure about this particular firewall script (I've not reviewed it completely) but I use my own firewall script on my server with fail2ban. Basically all the fail2ban rules are inserted at the head of the chain so any offending IP's are blocked right away even before traversing the chains.

I've used my own firewall script and fail2ban for about 2 years without any issues.

Penthux · 06-22-2011, 01:21 AM

Quote:

Originally Posted by mRgOBLIN

Along with sensible advice =)

That's a commodity in short supply these days.

Quote:

Originally Posted by tuxrules

Not sure about this particular firewall script (I've not reviewed it completely) but I use my own firewall script on my server with fail2ban. Basically all the fail2ban rules are inserted at the head of the chain so any offending IP's are blocked right away even before traversing the chains.

I've used my own firewall script and fail2ban for about 2 years without any issues.

If it works for you, use it. You don't need to fix something that's working perfectly, and this rc.firewall script isn't perfect, by any means.