Hi guys

I have been given the following task

go through the iptables (debian) records for a server for the last week or so, and aggregate up the destinations and ports so we can update the firewalls correctly. Bonus points if you can tell me what the things it's connecting are, or write the iptables definitions.


To be honest I have no clue and if someone could help me please.

Many thanks

Hi...

Is this a homework assignment? If so, please see the LQ rule concerning this here...

Have you performed any Google searches on the subject? If applicable, have you asked your teacher or professor for assistance?

Regards...

Hi ardvark71
Thanks for making the point. yes i ve done googling but found no guidance. i am not asking to do my job but just guide me. How do we aggregate up the destinations and ports? Great thanks

Hi...

This is not my area of expertise but assuming you have access to a Debian server, if logging hasn't been enabled already, you can do so by using the instructions here. If there are issues with removing the iptables log from kern.log or other locations, please see here.

As far as "aggregate up the destinations and ports," I have no idea how to help you here. I don't know the procedure or process involved in obtaining this information. I would encourage you to ask for help from your teacher or professor to at least point you in the right direction.

Regards...