Linux PowerPC Server Software

[xeno74]

BIND DNS server with DNSSEC:

[xeno74]

Connection state matching (CONFIG_NETFILTER_XT_MATCH_STATE)

Allows you to match packets based on their relationship to a tracked connection (ie. previous packets). For example for a desktop firewall.

Code: Select all

iptables -F
iptables -t filter -A INPUT -j DROP
iptables -t filter -I INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

Basically, all network connections are blocked from the outside except our system has established the connections.

[xeno74]

vsftpd FTP server on ubuntu MATE 16.04.6 LTS PowerPC:

[xeno74]

openSUSE Tumbleweed PPC64 with the Pure-FTPd:

[xeno74]

openSUSE Tumbleweed PPC64 with iptables and Pure-FTPd:

[xeno74]

openSUSE Tumbleweed PPC64 with iptables and Pure-FTPd in the NAT mode:

[xeno74]

Limit matching with iptables:

[xeno74]

Code: Select all

iptables -A INPUT -m tcp -p tcp --dport 22 -m state 
--state ESTABLISHED,RELATED -j ACCEPT 

iptables -A INPUT -m tcp -p tcp --dport 22 -m state 
--state NEW -m limit --limit 3/hour --limit-burst 3 -j ACCEPT 

iptables -A INPUT -m tcp -p tcp --dport 22 -j DROP

[xeno74]

Packet flow graph

[xeno74]

iptables with multiport support: