geoip_iptables_blocking
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
geoip_iptables_blocking [2016/03/08 15:29] – admin | geoip_iptables_blocking [2019/05/08 19:38] (current) – admin | ||
---|---|---|---|
Line 1: | Line 1: | ||
=====GeoIP for use with iptables (Debian 8 Jessie)===== | =====GeoIP for use with iptables (Debian 8 Jessie)===== | ||
+ | // | ||
+ | __**OUTDATED. MAXMIND stuff has changed. needs rework.**__// | ||
===install necessary software=== | ===install necessary software=== | ||
Line 43: | Line 45: | ||
</ | </ | ||
- | ===Bug hunting=== | + | ===Check your success=== |
- | (was on an arm machine, Linux hostname 3.16.0-4-kirkwood #1 Debian 3.16.7-ckt20-1+deb8u4 (2016-02-29) armv5tel GNU/Linux) | + | |
- | < | + | Lets take a look at the attack statistics |
- | limit | + | |
- | conntrack | + | |
- | conntrack | + | |
- | conntrack | + | |
- | multiport | + | |
- | udplite | + | |
- | udp | + | |
- | tcp | + | |
- | icmp | + | |
- | </ | + | |
- | no geoip, thats not cool. | + | {{ :: |
- | Solution: | + | phew, 0 attacks since i use GeoIP Tables blocking. I don't need my blocklist.de account anymore. At least not for SSH attacks. |
+ | |||
+ | |||
+ | ------------------------------- | ||
+ | |||
+ | Samesame for raspian on raspberry | ||
+ | |||
+ | Install linux kernel headers | ||
< | < | ||
- | aptitude | + | apt-get update && sudo apt-get |
- | *** time to get a cup of coffee *** | + | |
- | module-assistant | + | wget https:// |
+ | |||
+ | cd ~ | ||
+ | rpi-source | ||
</ | </ | ||
- | ===failed, damn=== | + | Install xtables-addons |
- | well then we take a little barefoot walk | + | |
< | < | ||
- | apt-get install git autoconf automake libtool xutils-dev | ||
- | |||
git clone git:// | git clone git:// | ||
cd xtables-addons | cd xtables-addons | ||
- | libtoolize --force | + | ./ |
- | aclocal | + | |
- | autoheader | + | |
- | autoconf | + | |
- | autoreconf -i | + | |
./configure | ./configure | ||
- | sudo make install | + | make -j5 |
- | sudo depmod | + | make install |
+ | depmod | ||
+ | reboot | ||
+ | |||
+ | cat / | ||
+ | |||
+ | conntrack | ||
+ | conntrack | ||
+ | conntrack | ||
+ | multiport | ||
+ | geoip | ||
+ | udplite | ||
+ | udp | ||
+ | tcp | ||
+ | icmp | ||
</ | </ |
geoip_iptables_blocking.1457450986.txt.gz · Last modified: 2016/03/08 15:29 by admin