# iptables Published articles for iptables. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Hide Your Servers in Plain Sight, Presenting ShieldWall DevFeed: [Hide Your Servers in Plain Sight, Presenting ShieldWall]() Original publisher: [Read original article]() Author: Simone Margaritelli Published: 2021-02-13T14:34:28Z Content type: release Language: en Sources: [evilsocket]() Topics: [Server](), [Encryption](), [Go Language](), [Raspberry Pi]() Tags: [api](), [cybersecurity](), [defensive-security](), [encryption](), [firewall](), [go](), [golang](), [iptables](), [network-security](), [project-release](), [raspberry-pi](), [remote-firewall-instrumentation](), [secret](), [server](), [server-hardening](), [servers](), [shieldwall]() ### AI overview This article introduces ShieldWall, a project intended to keep personal or sensitive services accessible across changing device IP addresses while limiting access to authorized devices at the packet level. It discusses Arc as a use case and mentions encrypted data, public servers, and hidden infrastructure for red team operations. ### Source excerpt Long time no see friends! Despite this break period ended up not being as long as I hoped ## Orange FTTH on a custom router DevFeed: [Orange FTTH on a custom router]() Original publisher: [Read original article]() Author: Marek Published: 2020-08-01T22:00:00Z Content type: tutorial Language: en Sources: [Marek Majkowski]() Topics: [Network Configuration](), [Debian](), [Network](), [Firewall](), [DHCP](), [huawei]() Tags: [debian](), [dhcp](), [firewall](), [ftth](), [huawei](), [interfaces](), [internet](), [iptables](), [ipv4](), [ipv6](), [mikrotik](), [network](), [pppoe](), [router](), [server](), [vlan]() ### AI overview A tutorial describing how to replace Orange's FunBox 3.0 with a custom Debian router for Orange FTTH in Poland. It covers obtaining an ONT and PPPoE credentials, configuring VLAN 35 and PPP, setting up iptables, and providing DHCP for the local network. ### Source excerpt Orange FTTH on a custom router Here in Poland, Orange has a decent FTTH offer - less than $16 for 300Mbit down, 50Mbit up. People reversed it over the years, most impressively Pierre Kim in 2016: Recently, it has been possible to replace the router the provider gives, called "FunBox 3.0", with a custom one. There are couple of reasons for that: - My understanding it's impossible to get a stable IPv6 on FunBox 3. - FunBox is proprietary and evil. ## Building mmproxy with Linux TPROXY and iptables to preserve client IP addresses DevFeed: [Building mmproxy with Linux TPROXY and iptables to preserve client IP addresses]() Original publisher: [Read original article]() Author: Marek Published: 2018-04-16T22:00:00Z Content type: article Language: en Sources: [Marek Majkowski]() Topics: [Linux](), [proxy](), [Protocol (disambiguation)](), [networking](), [Cloudflare]() Tags: [client](), [cloudflare](), [iptables](), [linux](), [protocol](), [proxy](), [v1]() ### AI overview This article describes building mmproxy with Linux's TPROXY iptables module: a simple Proxy Protocol v1 proxy that can preserve or locally spoof client IP addresses. It notes that the proxy is useful with Cloudflare Spectrum. ### Source excerpt mmproxy - creative linux routing hack 17 April 2018 I've published an article on how we abused TPROXY iptables module to build , a simple Proxy Protocol v1 proxy that can "preserve" (or locally spoof) client IP addreses. It's pretty useful together with Cloudflare Spectrum: ## Using TPROXY for Spectrum product DevFeed: [Using TPROXY for Spectrum product]() Original publisher: [Read original article]() Author: Marek Published: 2018-04-11T22:00:00Z Content type: article Language: en Sources: [Marek Majkowski]() Topics: [Cloudflare]() Tags: [article](), [build](), [cloudflare](), [iptables](), [module](), [product](), [using]() ### AI overview The article describes using the TPROXY iptables module to build Cloudflare Spectrum. ### Source excerpt Using TPROXY for Spectrum product 12 April 2018 I've published an article on how we used TPROXY iptables module to build Cloudflare Spectrum product: ## Fun with The Great Firewall DevFeed: [Fun with The Great Firewall]() Original publisher: [Read original article]() Author: Marek Published: 2013-07-10T22:00:00Z Content type: opinion Language: en Sources: [Marek Majkowski]() Topics: [Firewall](), [tor](), [TCP/IP]() Tags: [firewall](), [iptables](), [payload](), [port](), [servers](), [ssl](), [tcp-ip](), [tor]() ### AI overview The article describes observations of how China's Great Firewall probes and blocks Tor bridges. It reports that detected Tor bridges may have their IP-and-port tuples blocked for hours, while later probing behavior appeared to vary over time and was not fully understood. ### Source excerpt Fun with The Great Firewall I was playing with the Tor Project and decided to understand how the Chinese block Tor servers. Philipp Winter wrote an amazing paper on that subject. He noticed The Great Firewall of China is actively scanning services and if it detects a Tor bridge it blocks the ip:port tuple for a few hours. TCP/IP When a port gets censored "ACK" packets are dropped by the GFW. Most importantly and .