PaulHowarth/Blog/2006-02-16

Thursday 16th February 2006

Fedora Extras

Did my bit of the great Fedora Extras rebuild, taking the opportunity to clean up many of my spec files.

Firewall

Upgraded shorewall to 3.0.5, and added blacklist support on my adsl interface:

/etc/shorewall/interfaces:

#ZONE   INTERFACE       BROADCAST       OPTIONS
net     adsl            -               routefilter,norfc1918,tcpflags,blacklist
loc     eth0            detect          tcpflags
rtr     eth1            192.168.17.255  dhcp
vpn     tun0

/etc/shorewall/blacklist:

#ADDRESS/SUBNET         PROTOCOL        PORT
#
# Referrer spammers
209.172.35.0/26         tcp
#
# Persistent virus attackers
218.212.189.0/24        tcp             25
206.3.23.248            tcp             25

Local Packages


Recent