101 links of tutorials, tips, tricks and scripts for iptables

allow my girlI wanna learn about iptables but don’t know where to start, this post perhaps will be my collection of link around iptables.

Perhaps I can learn it by doing 🙂

Tutorial :

Howto, tips and trick:

Scripts :

Tools :

  • Firestarter (A graphical interfaced Open Source firewall for Linux.)
  • Firewall Builder (Firewall Builder is Open Source multi-platform firewall management software that supports Linux iptables, FreeBSD ipfilter and ipfw, OpenBSD pf.)
  • Shoreline Firewall (very powerful solution to help you configure an advanced firewall for any network)
  • Ipkungfu (working firewall “out of the box” with zero configuration)

Recommended Books :

I’ll update the list as soon I find interesting link.

Last update : February 7 2008

sysctl: kern.ipc.nmbclusters: Invalid argument

After read this article I try to practice in other server that has gigabit ethernet card .

I have download opensuse 10.3 in Gnome and KDE version and use it as sample stuff for sending via scp.

sending before tuning :

monitor# scp openSUSE-10.3-GM-GNOME-i386.iso [email protected]:/home/mother
Password:
openSUSE-10.3-GM-GNOME-i386.iso                                                             100%  665MB  10.2MB/s   01:05

ftp# sysctl kern.ipc.maxsockbuf=262144

ftp# sysctl net.inet.tcp.sendspace=65536

ftp# sysctl net.inet.tcp.recvspace=65536

ftp# sysctl net.inet.tcp.rfc1323=1

monitor# scp openSUSE-10.3-GM-GNOME-i386.iso [email protected]:/home/mother
Password:
openSUSE-10.3-GM-GNOME-i386.iso                                                             100%  665MB  10.4MB/s   01:04

tuning the values in ‘mother’

====================================================
testing transfer data to ‘mother’

monitor# ls
openSUSE-10.3-GM-GNOME-i386.iso openSUSE-10.3-GM-KDE-i386.iso
monitor# scp openSUSE-10.3-GM-GNOME-i386.iso [email protected]:/home/mother
Password:
openSUSE-10.3-GM-GNOME-i386.iso                                                             100%  665MB  10.4MB/s   01:04

====================================================

tuning the values to monitor
monitor# sysctl kern.ipc.maxsockbuf=262144
kern.ipc.maxsockbuf: 262144 -> 262144
monitor# sysctl net.inet.tcp.sendspace=65536
net.inet.tcp.sendspace: 32768 -> 65536
monitor# sysctl net.inet.tcp.recvspace=65536
net.inet.tcp.recvspace: 65536 -> 65536

testing again ::

monitor# scp openSUSE-10.3-GM-GNOME-i386.iso [email protected]:/home/mother
Password:
openSUSE-10.3-GM-GNOME-i386.iso                                                             100%  665MB  10.2MB/s   01:05o

speed decrease? from 10.4 to 10.2  MB/s with same time.

when I try this

ftp# sysctl kern.ipc.nmbclusters=32768
kern.ipc.nmbclusters: 33792
sysctl: kern.ipc.nmbclusters: Invalid argument

Gee, I must read sysctl manual first before try again 🙂

in Unix | 476 Words

kldxref: file isn’t dynamically-linked while upgrade to FreeBSD 7

Recent upgrade to FreeBSD 7 using cvsup with tag : RELENG_7 seem smooth except last result in make installkernel

kldxref: file isn’t dynamically-linked

this message make me confuse, since it’s first time I see the message.

copy old kernel already in my mind until googling for while this url encourage me to

reboot  🙂

checking  after reboot.

$ uname -a
FreeBSD  7.0-BETA1 FreeBSD 7.0-BETA1 #2: Mon Oct 29 15:51:56 UTC 2007

seem ok, time to makeworld and mergemaster .

 in mergemaster

*** Displaying differences between ./etc/rc.d/kldxref and installed version:

— /etc/rc.d/kldxref   2007-06-03 10:41:06.000000000 +0000
+++ ./etc/rc.d/kldxref  2007-10-29 18:11:07.000000000 +0000
@@ -1,10 +1,10 @@
 #!/bin/sh
 #
-# $FreeBSD: src/etc/rc.d/kldxref,v 1.4.2.1 2007/05/24 16:14:37 des Exp $
+# $FreeBSD: src/etc/rc.d/kldxref,v 1.6 2007/04/09 08:53:40 des Exp $
 #

 # PROVIDE: kldxref
-# REQUIRE: root FILESYSTEMS
+# REQUIRE: FILESYSTEMS
 # BEFORE:  netif
 # KEYWORD: nojail

this part might be related too 🙂

 

in Unix | 152 Words

7.0-BETA1 Available, 6.3-BETA1 coming soon…

Ken Smith kensmith at cse.Buffalo.EDU

We have entered the final phases of the FreeBSD-7.0 Release cycle which
also means the beginning of the FreeBSD-6.3 Release cycle.  Because the
people who support the ports for FreeBSD also need to go through a
freeze cycle as part of releases we had decided to combine the two
releases to try and minimize the impact on the ports maintainers.

The current plan is to interleave the BETAs/RCs of the 7.0 and 6.3
releases, trying to follow this for the dates when the builds will get
started (with them becoming available on the FTP mirrors a day or two
after the builds start):

            7.0     6.3
    BETA1   10/17   10/24
    BETA2   10/31   11/7
    RC1     11/14   11/21
    RC2     11/28   12/5
    REL     12/12   12/19

Tomorrow (10/23) the RELENG_6 branch will be marked "6.3-PRERELEASE" to
note that we have entered the 6.3 release cycle.

The schedule dates are, as usual, tentative.  At this point RELENG_6 is
pretty mature so that schedule should be fairly accurate.  Being a new
branch it is at least somewhat likely the dates for 7.0 will wind up
slipping.

The 7.0-BETA1 builds have completed and are on many of the FreeBSD
mirror sites.  If you want to update an existing machine using cvsup use
RELENG_7 as the branch tag.  Instructions on using FreeBSD Update to
perform a binary upgrade from FreeBSD 6.x to 7.0-BETA1 will be provided
via the freebsd-stable list when available.

For quick dl :

7.0-BETA1-i386-disc1.iso

in Unix | 292 Words

Hammer Filesystem on DFlyBSD 2.0

Recent blogwalking to dragonflybsd related blog lead me to Hammer filesystem.

Another filesystem, thats my thought in first impression till I see more description about it . Dragonflybsd 2.0 will include this filesystem.

I still waiting for FreeBSD releng 7 for it’s ZFS. I’m quite happy for snapshot version ( September version ). Can’t wait for 7.0 🙂

Perhaps upgrading ftp server to 7.0 after released 😉

so far performance of gstripe still awesome for me.

Will prepare more room for hammer and zfs testing.

more reading :

 

 

in Unix | 86 Words