geoip_iptables_blocking
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| geoip_iptables_blocking [2016/03/08 15:29] – admin | geoip_iptables_blocking [2019/05/08 19:38] (current) – admin | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| =====GeoIP for use with iptables (Debian 8 Jessie)===== | =====GeoIP for use with iptables (Debian 8 Jessie)===== | ||
| + | // | ||
| + | __**OUTDATED. MAXMIND stuff has changed. needs rework.**__// | ||
| ===install necessary software=== | ===install necessary software=== | ||
| Line 43: | Line 45: | ||
| </ | </ | ||
| - | ===Bug hunting=== | + | ===Check your success=== |
| - | (was on an arm machine, Linux hostname 3.16.0-4-kirkwood #1 Debian 3.16.7-ckt20-1+deb8u4 (2016-02-29) armv5tel GNU/Linux) | + | |
| - | < | + | Lets take a look at the attack statistics |
| - | limit | + | |
| - | conntrack | + | |
| - | conntrack | + | |
| - | conntrack | + | |
| - | multiport | + | |
| - | udplite | + | |
| - | udp | + | |
| - | tcp | + | |
| - | icmp | + | |
| - | </ | + | |
| - | no geoip, thats not cool. | + | {{ :: |
| - | Solution: | + | phew, 0 attacks since i use GeoIP Tables blocking. I don't need my blocklist.de account anymore. At least not for SSH attacks. |
| + | |||
| + | |||
| + | ------------------------------- | ||
| + | |||
| + | Samesame for raspian on raspberry | ||
| + | |||
| + | Install linux kernel headers | ||
| < | < | ||
| - | aptitude | + | apt-get update && sudo apt-get |
| - | *** time to get a cup of coffee *** | + | |
| - | module-assistant | + | wget https:// |
| + | |||
| + | cd ~ | ||
| + | rpi-source | ||
| </ | </ | ||
| - | ===failed, damn=== | + | Install xtables-addons |
| - | well then we take a little barefoot walk | + | |
| < | < | ||
| - | apt-get install git autoconf automake libtool xutils-dev | ||
| - | |||
| git clone git:// | git clone git:// | ||
| cd xtables-addons | cd xtables-addons | ||
| - | libtoolize --force | + | ./ |
| - | aclocal | + | |
| - | autoheader | + | |
| - | autoconf | + | |
| - | autoreconf -i | + | |
| ./configure | ./configure | ||
| - | sudo make install | + | make -j5 |
| - | sudo depmod | + | make install |
| + | depmod | ||
| + | reboot | ||
| + | |||
| + | cat / | ||
| + | |||
| + | conntrack | ||
| + | conntrack | ||
| + | conntrack | ||
| + | multiport | ||
| + | geoip | ||
| + | udplite | ||
| + | udp | ||
| + | tcp | ||
| + | icmp | ||
| </ | </ | ||
geoip_iptables_blocking.1457450986.txt.gz · Last modified: by admin
