Nick Gregory, a Sophos threat researcher, found this hole recently while checking netfilter for possible security problems. Gregory explains in great detail his bug hunt, and I recommend it for those ...

When deciding on a firewall implementation, most Unix-savvy administrators have usually chosen to use ipfilter on OpenBSD for their combination of capabilities and stability, as the capabilities of ...

Linux 2.4's Netfilter firewall code and its front end, iptables, deserve the praise and popularity they've garnered. They've brought Linux firewalls to the same level as commercial stateful ...

I'm looking to write a Perl program to monitor my network services for intrusion and DOS attempts. I want to take advantage of the INSERT and DELETE options of the "iptables" command. I was hoping ...

IPFire is a Linux-based stateful firewall distro that’s built on top of Netfilter. It began as a fork of the IPCop project, but has since been rewritten based on Linux From Scratch. IPFire can be ...

The Linux kernel includes some of the most powerful and flexible firewall code in any general-purpose operating system. This code is called Netfilter, though most of us refer to it by the name of its ...