VirtualTam's bookmarks
19 bookmarks found
Page 1 of 1
-
How NAT traversal works · Tailscale Blog
2020-09-19 -
- https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html
- https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html
- https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-instance-metadata-options.html
- https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/
- https://aws.amazon.com/blogs/aws/new-host-based-routing-support-for-aws-application-load-balancers/
- https://aws.amazon.com/about-aws/whats-new/2018/07/elastic-load-balancing-announces-support-for-redirects-and-fixed-responses-for-application-load-balancer/
- https://www.reddit.com/r/aws/comments/e18e5n/botexploit_what_is_this_trying_to_do_and_how
- https://www.reddit.com/r/aws/comments/e18e5n/botexploit_what_is_this_trying_to_do_and_how/f8qympp/
- https://forums.aws.amazon.com/thread.jspa?threadID=316889
- https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
- https://www.wired.com/story/capital-one-paige-thompson-case-hacking-spree/
- https://krebsonsecurity.com/2019/08/what-we-can-learn-from-the-capital-one-hack/
- https://krebsonsecurity.com/2019/07/capital-one-data-theft-impacts-106m-people/
- http://www.thecloudavenue.com/2019/08/how-capital-one-hack-was-achieved-in-aws.html
- http://www.thecloudavenue.com/2019/11/changes-to-aws-ec2-instance-metadata-service.html
-
Use case:
- Set up an AutoScaling Group with exactly 1 min/max/desired instance
- Attach an Elastic IP to the active instance
Usually for interoperability reasons and/or IP-based network rules (80's firewall anyone?).
-
ferm and docker playing together
2018-12-21 - https://github.com/diefans/ferment
- https://blog.urth.org/2018/06/01/making-docker-play-nice-with-ferm-firewalls-on-linux/
- https://unrouted.io/2017/08/15/docker-firewall/
- https://github.com/wikimedia/puppet/commit/74050c6233c8b5ae291d3d7f5131a587941c50ac
- https://github.com/moby/moby/issues/12294#issuecomment-432921518
- https://github.com/Jamesits/systemd-named-netns
-
iptables
2018-07-04 Documentation:
- https://www.netfilter.org/documentation/index.html
- https://www.netfilter.org/documentation/HOWTO//netfilter-hacking-HOWTO.html
- https://www.netfilter.org/documentation/HOWTO//networking-concepts-HOWTO.html
- https://www.netfilter.org/documentation/HOWTO//NAT-HOWTO.html
- https://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO.html
Articles:
- https://www.digitalocean.com/community/tutorials/how-the-iptables-firewall-works
- https://www.digitalocean.com/community/tutorials/how-to-list-and-delete-iptables-firewall-rules
- https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands
- https://www.digitalocean.com/community/tutorials/a-deep-dive-into-iptables-and-netfilter-architecture
- https://www.digitalocean.com/community/tutorials/how-to-choose-an-effective-firewall-policy-to-secure-your-servers
How-tos:
- https://wiki.centos.org/HowTos/Network/IPTables
- https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-using-iptables-on-ubuntu-14-04
Routing:
- https://www.frozentux.net/iptables-tutorial/iptables-tutorial.html
- https://www.frozentux.net/iptables-tutorial/images/tables_traverse.jpg
- https://www.frozentux.net/iptables-tutorial/images/table_subtraverse.jpg
- https://upload.wikimedia.org/wikipedia/commons/3/37/Netfilter-packet-flow.svg
RHEL Documentation:
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-common_iptables_filtering
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-forward_and_nat_rules
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-malicious_software_and_spoofed_ip_addresses
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-iptables_and_connection_tracking
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-iptables
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-setting_and_controlling_ip_sets_using_iptables
-
- http://www.chiark.greenend.org.uk/%7Epeterb/network/drop-vs-reject
- https://security.stackexchange.com/questions/22686/is-it-good-practice-to-manually-lock-down-ports-on-each-host
- https://security.stackexchange.com/questions/22711/is-it-a-bad-idea-for-a-firewall-to-block-icmp/22713
- https://serverfault.com/questions/84963/why-not-block-icmp/84981
-
Proxmox: Networking, Firewall, Security
2018-05-15 - https://pve.proxmox.com/wiki/Network_Configuration
- https://pve.proxmox.com/wiki/Firewall
- https://pve.proxmox.com/wiki/Fail2ban
- https://forum.proxmox.com/threads/how-to-implement-fail2ban-on-host.3583/
- https://forum.proxmox.com/forums/proxmox-ve-networking-and-firewall.17/
- https://myatus.com/p/guide-firewall-and-router-with-proxmox-extending-its-us/
- https://www.kiloroot.com/secure-proxmox-install-sudo-firewall-with-ipv6-and-more-how-to-configure-from-start-to-finish/
- https://blog.waccabac.com/gestion-du-pare-feu-de-proxmox-ve-4/
-
ferm - for Easy Rule Making
2017-09-05
Page 1 of 1