├── .gitignore ├── .travis.yml ├── ChangeLog ├── Jenkinsfile ├── Makefile ├── README.md ├── TODO ├── addons ├── addons ├── eps_to_png └── fabpdf ├── appendices ├── ICMP_types.sgml ├── acknowledgements.sgml ├── common_problems.sgml ├── detailed_explanations.sgml ├── history.sgml ├── other_resources.sgml ├── script_codebase.sgml └── tcpoptions.sgml ├── bookinfo.sgml ├── build-env └── Dockerfile ├── changes.sh ├── chapters ├── commercial_products.sgml ├── debugging.sgml ├── example_scripts.sgml ├── firewall_explanation.sgml ├── guis.sgml ├── how_a_rule_is_built.sgml ├── introduction.sgml ├── ip_filtering_introduction.sgml ├── iptables_matches.sgml ├── iptables_targets.sgml ├── nat_introduction.sgml ├── preparations.sgml ├── rc_firewall.sgml ├── saveandrestore.sgml ├── statemachine.sgml ├── tcp_ip_repetition.sgml └── traversing_of_tables_and_chains.sgml ├── images ├── caution.gif ├── cisco-pix-dmz-lan.gif ├── easyfwgen.gif ├── fwbuilder-firewall.gif ├── icmp-address-mask-headers.gif ├── icmp-basic-headers.gif ├── icmp-destination-unreachable-headers.gif ├── icmp-echo-headers.gif ├── icmp-information-headers.gif ├── icmp-parameter-problem-headers.gif ├── icmp-redirect-headers.gif ├── icmp-source-quench-headers.gif ├── icmp-time-exceeded-headers.gif ├── icmp-timestamp-headers.gif ├── important.gif ├── ip-headers.gif ├── ipmenu.gif ├── nat-machine.gif ├── nessus-report.gif ├── nmapfe.gif ├── note.gif ├── packet_traverse.gif ├── packet_traverse_FORWARD.gif ├── packet_traverse_INPUT.gif ├── packet_traverse_OUTPUT.gif ├── rc_DHCP_firewall.gif ├── rc_DMZ_firewall.gif ├── rc_UTIN_firewall.gif ├── rc_firewall.gif ├── sctp-chunk-abort-header.gif ├── sctp-chunk-cookie-ack-header.gif ├── sctp-chunk-cookie-echo-header.gif ├── sctp-chunk-data-header.gif ├── sctp-chunk-error-header.gif ├── sctp-chunk-heartbeat-ack-header.gif ├── sctp-chunk-heartbeat-header.gif ├── sctp-chunk-init-ack-header.gif ├── sctp-chunk-init-ack-param-state-cookie-header.gif ├── sctp-chunk-init-header.gif ├── sctp-chunk-init-param-host-name-header.gif ├── sctp-chunk-init-param-ipv4-header.gif ├── sctp-chunk-init-param-ipv6-header.gif ├── sctp-chunk-sack-header.gif ├── sctp-chunk-shutdown-ack-header.gif ├── sctp-chunk-shutdown-complete-header.gif ├── sctp-chunk-shutdown-header.gif ├── sctp-chunks-generic-fields.gif ├── sctp-common-header.gif ├── sctp-generic-header.gif ├── state-icmp-ping.gif ├── state-tcp-client-subconn.gif ├── state-tcp-closing.gif ├── state-tcp-connecting.gif ├── state-tcp-icmp-reply.gif ├── state-tcp-server-subconn.gif ├── state-udp-connection.gif ├── state-udp-icmp-reply.gif ├── table_subtraverse.gif ├── tables_traverse.gif ├── tablesnchains_traverse.gif ├── tcp-headers.gif ├── templates │ ├── admons │ │ ├── caution.gif │ │ ├── caution.tif │ │ ├── important.gif │ │ ├── important.tif │ │ ├── note.gif │ │ ├── note.tif │ │ ├── note2.tif │ │ ├── tip.gif │ │ ├── tip.tif │ │ ├── warning.gif │ │ └── warning.tif │ ├── dias │ │ ├── cisco-pix-dmz-lan.dia │ │ ├── nat-machine.dia │ │ ├── packet_traverse.dia │ │ ├── packet_traverse_FORWARD.dia │ │ ├── packet_traverse_INPUT.dia │ │ ├── packet_traverse_OUTPUT.dia │ │ ├── rc_DHCP_firewall.dia │ │ ├── rc_DMZ_firewall.dia │ │ ├── rc_UTIN_firewall.dia │ │ ├── rc_firewall.dia │ │ ├── state-icmp-ping.dia │ │ ├── state-tcp-client-subconn.dia │ │ ├── state-tcp-closing.dia │ │ ├── state-tcp-connecting.dia │ │ ├── state-tcp-icmp-reply.dia │ │ ├── state-tcp-server-subconn.dia │ │ ├── state-udp-connection.dia │ │ ├── state-udp-icmp-reply.dia │ │ ├── table_subtraverse.dia │ │ └── tables_traverse.dia │ ├── new │ │ ├── html.dsl │ │ ├── icmp-address-mask-header.sgml │ │ ├── icmp-basic-header.sgml │ │ ├── icmp-destination-unreachable-header.sgml │ │ ├── icmp-echo-header.sgml │ │ ├── icmp-information-header.sgml │ │ ├── icmp-parameter-problem-header.sgml │ │ ├── icmp-redirect-header.sgml │ │ ├── icmp-source-quench-header.sgml │ │ ├── icmp-time-exceeded-header.sgml │ │ ├── icmp-timestamp-header.sgml │ │ ├── index.html │ │ ├── index.sgml │ │ ├── ip-header.sgml │ │ ├── remember.sh │ │ ├── resultat.html │ │ ├── sctp-chunk-abort-header.sgml │ │ ├── sctp-chunk-abort-header.txt │ │ ├── sctp-chunk-cookie-ack-header.sgml │ │ ├── sctp-chunk-cookie-ack-header.txt │ │ ├── sctp-chunk-cookie-echo-header.sgml │ │ ├── sctp-chunk-cookie-echo-header.txt │ │ ├── sctp-chunk-data-header.sgml │ │ ├── sctp-chunk-data-header.txt │ │ ├── sctp-chunk-error-header.sgml │ │ ├── sctp-chunk-error-header.txt │ │ ├── sctp-chunk-heartbeat-ack-header.sgml │ │ ├── sctp-chunk-heartbeat-ack-header.txt │ │ ├── sctp-chunk-heartbeat-header.sgml │ │ ├── sctp-chunk-heartbeat-header.txt │ │ ├── sctp-chunk-init-ack-header.sgml │ │ ├── sctp-chunk-init-ack-header.txt │ │ ├── sctp-chunk-init-ack-param-state-cookie-header.sgml │ │ ├── sctp-chunk-init-header.sgml │ │ ├── sctp-chunk-init-header.txt │ │ ├── sctp-chunk-init-param-host-name-header.sgml │ │ ├── sctp-chunk-init-param-host-name-header.txt │ │ ├── sctp-chunk-init-param-ipv4-header.sgml │ │ ├── sctp-chunk-init-param-ipv4-header.txt │ │ ├── sctp-chunk-init-param-ipv6-header.sgml │ │ ├── sctp-chunk-init-param-ipv6-header.txt │ │ ├── sctp-chunk-sack-header.sgml │ │ ├── sctp-chunk-sack-header.txt │ │ ├── sctp-chunk-shutdown-ack-header.sgml │ │ ├── sctp-chunk-shutdown-ack-header.txt │ │ ├── sctp-chunk-shutdown-complete-header.sgml │ │ ├── sctp-chunk-shutdown-complete-header.txt │ │ ├── sctp-chunk-shutdown-header.sgml │ │ ├── sctp-chunk-shutdown-header.txt │ │ ├── sctp-chunks-generic-fields.sgml │ │ ├── sctp-chunks-generic-fields.txt │ │ ├── sctp-common-header.sgml │ │ ├── sctp-common-header.txt │ │ ├── sctp-generic-header.sgml │ │ ├── sctp-generic-header.txt │ │ ├── table.css │ │ ├── tcp-header.sgml │ │ ├── template-header.sgml │ │ └── udp-header.sgml │ ├── tcpipreferencestuff.html │ └── tcpipreferencestuff.sxc ├── tip.gif ├── turtlefirewall-items.gif ├── turtlefirewall-main-screen.gif ├── udp-headers.gif └── warning.gif ├── iptables-tutorial.sgml ├── licensing ├── fdl.sgml └── gpl.sgml ├── other ├── firewall_rules_table_final.pdf ├── ip-param.txt ├── ip-sysctl.txt ├── ip_dynaddr.txt ├── iptables.html ├── protocols.txt ├── rfc1122.txt ├── rfc1349.txt ├── rfc2401.txt ├── rfc2474.txt ├── rfc2638.txt ├── rfc3168.txt ├── rfc3260.txt ├── rfc768.txt ├── rfc791.txt ├── rfc792.txt ├── rfc793.txt ├── rfc959.txt └── services.txt ├── portuguese ├── ChangeLog ├── Makefile ├── TODO ├── appendices │ ├── ICMP_types.sgml │ ├── acknowledgements.sgml │ ├── common_problems.sgml │ ├── detailed_explanations.sgml │ ├── history.sgml │ ├── other_resources.sgml │ └── script_codebase.sgml ├── bookinfo.sgml ├── chapters │ ├── example_scripts.sgml │ ├── firewall_explanation.sgml │ ├── how_a_rule_is_built.sgml │ ├── introduction.sgml │ ├── preparations.sgml │ ├── rc_firewall.sgml │ ├── saveandrestore.sgml │ ├── statemachine.sgml │ └── traversing_of_tables_and_chains.sgml ├── images │ ├── caution.gif │ ├── convsize.sh │ ├── note.gif │ ├── packet_traverse.gif │ ├── packet_traverse_FORWARD.gif │ ├── packet_traverse_INPUT.gif │ ├── packet_traverse_OUTPUT.gif │ ├── rc.DHCP.firewall.gif │ ├── rc.DMZ.firewall.gif │ ├── rc.UTIN.firewall.gif │ ├── rc.firewall.gif │ ├── rc_DHCP_firewall.gif │ ├── rc_DMZ_firewall.gif │ ├── rc_UTIN_firewall.gif │ ├── rc_firewall.gif │ ├── state-icmp-ping.gif │ ├── state-tcp-client-subconn.gif │ ├── state-tcp-closing.gif │ ├── state-tcp-connecting.gif │ ├── state-tcp-icmp-reply.gif │ ├── state-tcp-server-subconn.gif │ ├── state-udp-connection.gif │ ├── state-udp-icmp-reply.gif │ ├── tables_traverse.gif │ ├── tablesnchains_traverse.gif │ ├── templates │ │ ├── Image13.psp │ │ ├── figurer.gif │ │ ├── packet_traverse.psp │ │ ├── pilar.gif │ │ ├── rc.DHCP.firewall.psp │ │ ├── rc.UTIN.firewall.psp │ │ ├── rc.firewall.psp │ │ ├── state-icmp-ping.png │ │ ├── state-tcp-client-subconn.png │ │ ├── state-tcp-closing.kpr │ │ ├── state-tcp-closing.png │ │ ├── state-tcp-connecting.kpr │ │ ├── state-tcp-connecting.png │ │ ├── state-tcp-icmp-reply.png │ │ ├── state-tcp-server-subconn.png │ │ ├── state-udp-connection.png │ │ ├── state-udp-icmp-reply.png │ │ ├── tablenchains_traverse.psp │ │ ├── tablenchains_traverse2.psp │ │ ├── tables_traverse.gif │ │ ├── tables_traverse.psp │ │ └── tables_traverse2.psp │ └── warning.gif ├── index.html ├── iptables-tutorial.sgml ├── licensing │ ├── fdl.sgml │ └── gpl.sgml ├── mirrors.html ├── other │ ├── ip-param.txt │ ├── ip-sysctl.txt │ ├── ip_dynaddr.txt │ ├── iptables.html │ ├── protocols.txt │ ├── rfc792.txt │ ├── rfc793.txt │ ├── rfc959.txt │ └── services.txt └── scripts │ ├── iptsave-ruleset.txt │ ├── iptsave-saved.txt │ ├── limit-match.txt │ ├── pid-owner.txt │ ├── rc.DHCP.firewall.txt │ ├── rc.DMZ.firewall.txt │ ├── rc.UTIN.firewall.txt │ ├── rc.firewall.txt │ ├── rc.flush-iptables.txt │ ├── rc.test-iptables.txt │ ├── retrieveip.txt │ ├── sid-owner.txt │ └── ttl-inc.txt ├── scripts ├── iptsave-ruleset.txt ├── iptsave-saved.txt ├── limit-match.txt ├── pid-owner.txt ├── rc.DHCP.firewall.txt ├── rc.DMZ.firewall.txt ├── rc.UTIN.firewall.txt ├── rc.firewall.txt ├── rc.flush-iptables.txt ├── rc.test-iptables.txt ├── recent-match.txt ├── retrieveip.txt ├── sid-owner.txt └── ttl-inc.txt ├── spanish ├── ChangeLog ├── Makefile ├── Makefile.new ├── TODO ├── appendices │ ├── ICMP_types.sgml │ ├── acknowledgements.sgml │ ├── common_problems.sgml │ ├── detailed_explanations.sgml │ ├── history.sgml │ ├── other_resources.sgml │ └── script_codebase.sgml ├── bookinfo.sgml ├── changes.sh ├── chapters │ ├── acknowledgements.sgml │ ├── common_problems.sgml │ ├── example_scripts.sgml │ ├── firewall_explanation.sgml │ ├── how_a_rule_is_built.sgml │ ├── introduction.sgml │ ├── preparations.sgml │ ├── rc_firewall.sgml │ ├── saveandrestore.sgml │ ├── statemachine.sgml │ └── traversing_of_tables_and_chains.sgml ├── images │ ├── caution.gif │ ├── convsize.sh │ ├── images.zip │ ├── note.gif │ ├── packet_traverse.gif │ ├── packet_traverse_FORWARD.gif │ ├── packet_traverse_INPUT.gif │ ├── packet_traverse_OUTPUT.gif │ ├── rc.DHCP.firewall.gif │ ├── rc.DMZ.firewall.gif │ ├── rc.UTIN.firewall.gif │ ├── rc.firewall.gif │ ├── rc_DHCP_firewall.gif │ ├── rc_DMZ_firewall.gif │ ├── rc_UTIN_firewall.gif │ ├── rc_firewall.gif │ ├── state-icmp-ping.gif │ ├── state-tcp-client-subconn.gif │ ├── state-tcp-closing.gif │ ├── state-tcp-connecting.gif │ ├── state-tcp-icmp-reply.gif │ ├── state-tcp-server-subconn.gif │ ├── state-udp-connection.gif │ ├── state-udp-icmp-reply.gif │ ├── tables_traverse.gif │ ├── tablesnchains_traverse.gif │ ├── templates │ │ ├── Image13.psp │ │ ├── figurer.gif │ │ ├── packet_traverse.psp │ │ ├── pilar.gif │ │ ├── rc.DHCP.firewall.psp │ │ ├── rc.UTIN.firewall.psp │ │ ├── rc.firewall.psp │ │ ├── state-icmp-ping.png │ │ ├── state-tcp-client-subconn.png │ │ ├── state-tcp-closing.kpr │ │ ├── state-tcp-closing.png │ │ ├── state-tcp-connecting.kpr │ │ ├── state-tcp-connecting.png │ │ ├── state-tcp-icmp-reply.png │ │ ├── state-tcp-server-subconn.png │ │ ├── state-udp-connection.png │ │ ├── state-udp-icmp-reply.png │ │ ├── tablenchains_traverse.psp │ │ ├── tablenchains_traverse2.psp │ │ ├── tables_traverse.gif │ │ ├── tables_traverse.psp │ │ ├── tables_traverse.xcf │ │ └── tables_traverse2.psp │ ├── tip.gif │ └── warning.gif ├── index.php ├── iptables-tutorial.sgml ├── licensing │ ├── fdl-es.sgml │ ├── fdl.sgml │ ├── gpl-es.sgml │ └── gpl.sgml ├── logfile ├── mirrors.html ├── other │ ├── ip-param.txt │ ├── ip-sysctl.txt │ ├── ip_dynaddr.txt │ ├── ip_dynaddr_rst2.txt │ ├── iptables.html │ ├── protocols.txt │ ├── rfc792.txt │ ├── rfc793.txt │ ├── rfc959.txt │ └── services.txt └── scripts │ ├── iptsave-ruleset.txt │ ├── iptsave-saved.txt │ ├── limit-match.txt │ ├── pid-owner.txt │ ├── rc.DHCP.firewall.txt │ ├── rc.DMZ.firewall.txt │ ├── rc.UTIN.firewall.txt │ ├── rc.firewall.txt │ ├── rc.flush-iptables.txt │ ├── rc.test-iptables.txt │ ├── retrieveip.txt │ ├── sid-owner.txt │ └── ttl-inc.txt └── styles ├── html.dsl └── print.dsl /.gitignore: -------------------------------------------------------------------------------- 1 | *.swp 2 | 3 | iptables-tutorial.src.tgz 4 | iptables-tutorial.pdf.gz 5 | iptables-tutorial.chunky.tgz 6 | iptables-tutorial-index.sgml 7 | iptables-tutorial.chunky.tar.gz 8 | iptables-tutorial.html 9 | iptables-tutorial.html.tgz 10 | iptables-tutorial.ps.gz 11 | chunkyhtml/ 12 | 13 | images/*.eps 14 | images/*.jpg 15 | images/*.png 16 | portuguese/images/*.eps 17 | portuguese/images/*.jpg 18 | portuguese/images/*.png 19 | spanish/images/*.eps 20 | spanish/images/*.jpg 21 | spanish/images/*.png 22 | 23 | spanish/html 24 | portuguese/html 25 | html 26 | -------------------------------------------------------------------------------- /.travis.yml: -------------------------------------------------------------------------------- 1 | sudo: false 2 | addons: 3 | apt: 4 | packages: 5 | - dblatex 6 | - ditaa 7 | - doc-base 8 | - docbook 9 | - docbook-dsssl 10 | - docbook-utils 11 | - docbook-xml 12 | - docbook-xsl 13 | - docbook2odf 14 | - texlive-font-utils 15 | - ghostscript 16 | - libbatik-java 17 | - netpbm 18 | - pstoedit 19 | - python-pygments 20 | notifications: 21 | email: false 22 | script: 23 | - "make all" 24 | -------------------------------------------------------------------------------- /ChangeLog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/ChangeLog -------------------------------------------------------------------------------- /Jenkinsfile: -------------------------------------------------------------------------------- 1 | #!/usr/bin/groovy 2 | 3 | parallel 'pdf': { 4 | stage('PDF') { 5 | node { 6 | checkout scm 7 | sh "make pdf -j4" 8 | } 9 | } 10 | }, 11 | 'html': { 12 | stage('HTML') { 13 | node { 14 | checkout scm 15 | sh "make html" 16 | } 17 | } 18 | }, 19 | 'src': { 20 | stage('src') { 21 | node { 22 | checkout scm 23 | sh "make src" 24 | } 25 | } 26 | }, 27 | 'ps': { 28 | stage('PS') { 29 | node { 30 | checkout scm 31 | sh "make ps" 32 | } 33 | } 34 | } 35 | 36 | parallel 'spanish': { 37 | stage('Spanish') { 38 | node { 39 | checkout scm 40 | sh "make spanish" 41 | } 42 | } 43 | }, 44 | 'portuguese': { 45 | stage('Portuguese') { 46 | node { 47 | checkout scm 48 | sh "make portuguese" 49 | } 50 | } 51 | } 52 | 53 | -------------------------------------------------------------------------------- /TODO: -------------------------------------------------------------------------------- 1 | * tcp-window-tracking - real TCP window tracking according to [ROOIJ] 2 | * nf-log?? 3 | * Add section about VPN and iptables (ie, private incoming traffic to netfilter 4 | box with public iface and vpn iface on top). including routing. nat'ed ipsec, 5 | openvpn. filtering ipsec, openvpn. 6 | * French translation needs to be done in DocBook SGML, please? Should fix 7 | problem with wrong charset encoding. 8 | * Rewrite rc_firewall.sgml chapter to be more "writing directions". 9 | 10 | More installation notes 11 | * Separate installation notes for 2.6 kernels and 2.4 kernels. 12 | * POM-NG!!! 13 | 14 | -------------------------------------------------------------------------------- /addons/addons: -------------------------------------------------------------------------------- 1 | Basically, just add a new backend (pdf backend already exist, but doesn't work nice for me nor 2 | for you it seems...). 3 | 4 | Just copy the file fabpdf 5 | into /usr/share/sgml/docbook/utils-0.6/backends/fabpdf 6 | (for me, for you it might be another 7 | directory, to know the right path, just type : 8 | # jw -b toto 9 | jw: There is no backend called "/usr/share/sgml/docbook/utils-0.6/backends/toto". 10 | so here my directory is /usr/share/sgml/docbook/utils-0.6/backends/ 11 | ) 12 | 13 | Then move eps_to_png into /usr/bin/ or anywhere else in your path. 14 | 15 | I've modified your makefiles already, 16 | it should work nice for pdf... 17 | -------------------------------------------------------------------------------- /addons/eps_to_png: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | echo "changing all eps to png for file $1" 3 | cat $1 | sed -e s/\\.eps/\\.png/g > $1.tmp 4 | cat $1.tmp | sed -e s/eps\}/png\}/g > $1 5 | rm -f $1.tmp 6 | -------------------------------------------------------------------------------- /addons/fabpdf: -------------------------------------------------------------------------------- 1 | # Backend to convert something into PDF 2 | # Send any comments to Eric Bischoff 3 | # This program is under GPL license. See LICENSE file for details. 4 | 5 | # Convert to TeX 6 | echo $SGML_ARGUMENTS 7 | echo $SGML_JADE 8 | $SGML_JADE -t tex -o ${SGML_FILE_NAME}.tex $SGML_ARGUMENTS 9 | if [ $? -ne 0 ] 10 | then exit 1 11 | fi 12 | 13 | eps_to_png ${SGML_FILE_NAME}.tex 14 | 15 | # Convert from TeX to PDF 16 | pdfjadetex ${SGML_FILE_NAME}.tex >${SGML_FILE_NAME}.tmp 17 | if [ $? -ne 0 ] 18 | then 19 | cat ${SGML_FILE_NAME}.tmp 20 | rm ${SGML_FILE_NAME}.tmp 21 | rm ${SGML_FILE_NAME}.tex 22 | exit 2 23 | fi 24 | rm ${SGML_FILE_NAME}.tmp 25 | 26 | # Unconditionally re-run pdfjadetex, twice 27 | pdfjadetex ${SGML_FILE_NAME}.tex >/dev/null 28 | pdfjadetex ${SGML_FILE_NAME}.tex >/dev/null 29 | rm ${SGML_FILE_NAME}.log 30 | rm ${SGML_FILE_NAME}.aux 31 | rm ${SGML_FILE_NAME}.tex 32 | 33 | exit 0 34 | -------------------------------------------------------------------------------- /appendices/acknowledgements.sgml: -------------------------------------------------------------------------------- 1 | 2 | Acknowledgments 3 | 4 | I would like to thank the following people for their help on this document: 5 | 6 | 7 | 8 | 9 | 10 | 11 | Fabrice 12 | Marie, For major updates to my horrible grammar and spelling. 13 | Also a huge thanks for updating the tutorial to DocBook format with make files 14 | etc. 15 | 16 | 17 | 18 | 19 | 20 | Marc 21 | Boucher, For helping me out on some aspects on using the 22 | state matching code. 23 | 24 | 25 | 26 | 27 | 28 | Frode E. 29 | Nyboe, For greatly improving the 30 | rc.firewall rules and giving great inspiration while 31 | I was to rewrite the rule-set and being the one who introduced the multiple table 32 | traversing into the same file. 33 | 34 | 35 | 36 | 37 | 38 | Chapman 39 | Brad, Alexander W. 41 | Janssen, Both for making me realize I was thinking wrongly 42 | about how packets traverse the basic NAT and filters tables and in which order 43 | they show up. 44 | 45 | 46 | 47 | 48 | Michiel 49 | Brandenburg, Myles 51 | Uyema, For helping me out with some of the state matching 52 | code and getting it to work. 53 | 54 | 55 | 56 | 57 | 58 | Kent `Artech' 59 | Stahre, For helping me out with the graphics. I know I suck 60 | at graphics, and you're better than most I know who do graphics;). Also thanks 61 | for checking the tutorial for errors etc. 62 | 63 | 64 | 65 | 66 | 67 | Anders 'DeZENT' Johansson, For hinting me about 68 | strange ISPs and so on that uses reserved networks on the Internet, or at 69 | least on the Internet for you. 70 | 71 | 72 | 73 | 74 | 75 | Jeremy 76 | `Spliffy' Smith, For giving me hints at stuff that might 77 | screw up for people and for trying it out and checking for errors in what I've 78 | written. 79 | 80 | 81 | 82 | 83 | And of course everyone else I talked to and asked for comments on this file, 84 | sorry for not mentioning everyone. 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | -------------------------------------------------------------------------------- /appendices/history.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/appendices/history.sgml -------------------------------------------------------------------------------- /appendices/script_codebase.sgml: -------------------------------------------------------------------------------- 1 | 2 | Example scripts code-base 3 | 4 | Example scripts 5 | 6 | 7 |
8 | Example rc.firewall script 9 | 10 | Example scripts 11 | rc.firewall.txt 12 | 13 | 14 | 15 | 16 | &rcfirewall; 17 | 18 | 19 | 20 |
21 | 22 |
23 | Example rc.DMZ.firewall script 24 | 25 | Example scripts 26 | rc.DMZ.firewall.txt 27 | 28 | 29 | 30 | &rcdmzfirewall; 31 | 32 | 33 | 34 |
35 | 36 |
37 | Example rc.UTIN.firewall script 38 | 39 | Example scripts 40 | rc.UTIN.firewall.txt 41 | 42 | 43 | 44 | 45 | &rcutinfirewall; 46 | 47 | 48 | 49 |
50 | 51 |
52 | Example rc.DHCP.firewall script 53 | 54 | Example scripts 55 | rc.DHCP.firewall.txt 56 | 57 | 58 | 59 | 60 | &rcdhcpfirewall; 61 | 62 | 63 | 64 |
65 | 66 |
67 | Example rc.flush-iptables script 68 | 69 | Example scripts 70 | rc.flush-iptables.txt 71 | 72 | 73 | 74 | 75 | &flushtables; 76 | 77 | 78 | 79 |
80 | 81 |
82 | Example rc.test-iptables script 83 | 84 | Example scripts 85 | rc.test-iptables.txt 86 | 87 | 88 | 89 | 90 | &testtables; 91 | 92 | 93 | 94 |
95 | 96 | 97 | 98 | 99 | -------------------------------------------------------------------------------- /build-env/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM debian:bookworm-slim 2 | 3 | LABEL version="0.1" 4 | LABEL description="Build environment for iptables-tutorial" 5 | LABEL maintainer="oan@frozentux.net" 6 | 7 | ARG USERNAME 8 | ARG USERID 9 | ARG GROUPID 10 | 11 | ENV USER=${USERNAME} 12 | ENV DEBIAN_FRONTEND=noninteractive 13 | 14 | USER root 15 | 16 | RUN apt-get update && apt-get upgrade -y && apt-get install -y \ 17 | netpbm \ 18 | imagemagick \ 19 | docbook \ 20 | docbook-dsssl \ 21 | docbook-website \ 22 | docbook-xml \ 23 | docbook-utils \ 24 | texlive-font-utils \ 25 | rsync \ 26 | make \ 27 | bash 28 | 29 | # Fix for ImageMagick 30 | RUN sed -i 's/domain=\"coder\" rights=\"none\"/domain=\"coder\" rights=\"read\|write\"/g' \ 31 | /etc/ImageMagick-6/policy.xml 32 | 33 | RUN groupadd -g ${GROUPID} ${USERNAME} \ 34 | && useradd ${USERNAME} \ 35 | --create-home \ 36 | --uid ${USERID} \ 37 | --gid ${GROUPID} \ 38 | --shell=/bin/bash 39 | 40 | USER ${USERNAME} 41 | 42 | WORKDIR /home/${USERNAME} 43 | 44 | CMD ["bash"] 45 | 46 | -------------------------------------------------------------------------------- /changes.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # changes.sh - used for iptables-tutorial mirroring 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <blueflux@koffein.net> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | for file in ./*.html ; do 23 | cat ${file} | sed -e 's/http:\/\/iptables-tutorial.frozentux.net\/scripts\//scripts\//g' > ${file}2 24 | cat ${file}2 | sed -e 's/http:\/\/iptables-tutorial.frozentux.net\/other\//other\//g' > ${file} 25 | rm -f ${file}2 26 | done 27 | 28 | -------------------------------------------------------------------------------- /images/caution.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/caution.gif -------------------------------------------------------------------------------- /images/cisco-pix-dmz-lan.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/cisco-pix-dmz-lan.gif -------------------------------------------------------------------------------- /images/easyfwgen.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/easyfwgen.gif -------------------------------------------------------------------------------- /images/fwbuilder-firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/fwbuilder-firewall.gif -------------------------------------------------------------------------------- /images/icmp-address-mask-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/icmp-address-mask-headers.gif -------------------------------------------------------------------------------- /images/icmp-basic-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/icmp-basic-headers.gif -------------------------------------------------------------------------------- /images/icmp-destination-unreachable-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/icmp-destination-unreachable-headers.gif -------------------------------------------------------------------------------- /images/icmp-echo-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/icmp-echo-headers.gif -------------------------------------------------------------------------------- /images/icmp-information-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/icmp-information-headers.gif -------------------------------------------------------------------------------- /images/icmp-parameter-problem-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/icmp-parameter-problem-headers.gif -------------------------------------------------------------------------------- /images/icmp-redirect-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/icmp-redirect-headers.gif -------------------------------------------------------------------------------- /images/icmp-source-quench-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/icmp-source-quench-headers.gif -------------------------------------------------------------------------------- /images/icmp-time-exceeded-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/icmp-time-exceeded-headers.gif -------------------------------------------------------------------------------- /images/icmp-timestamp-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/icmp-timestamp-headers.gif -------------------------------------------------------------------------------- /images/important.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/important.gif -------------------------------------------------------------------------------- /images/ip-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/ip-headers.gif -------------------------------------------------------------------------------- /images/ipmenu.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/ipmenu.gif -------------------------------------------------------------------------------- /images/nat-machine.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/nat-machine.gif -------------------------------------------------------------------------------- /images/nessus-report.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/nessus-report.gif -------------------------------------------------------------------------------- /images/nmapfe.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/nmapfe.gif -------------------------------------------------------------------------------- /images/note.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/note.gif -------------------------------------------------------------------------------- /images/packet_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/packet_traverse.gif -------------------------------------------------------------------------------- /images/packet_traverse_FORWARD.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/packet_traverse_FORWARD.gif -------------------------------------------------------------------------------- /images/packet_traverse_INPUT.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/packet_traverse_INPUT.gif -------------------------------------------------------------------------------- /images/packet_traverse_OUTPUT.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/packet_traverse_OUTPUT.gif -------------------------------------------------------------------------------- /images/rc_DHCP_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/rc_DHCP_firewall.gif -------------------------------------------------------------------------------- /images/rc_DMZ_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/rc_DMZ_firewall.gif -------------------------------------------------------------------------------- /images/rc_UTIN_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/rc_UTIN_firewall.gif -------------------------------------------------------------------------------- /images/rc_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/rc_firewall.gif -------------------------------------------------------------------------------- /images/sctp-chunk-abort-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-abort-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-cookie-ack-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-cookie-ack-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-cookie-echo-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-cookie-echo-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-data-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-data-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-error-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-error-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-heartbeat-ack-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-heartbeat-ack-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-heartbeat-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-heartbeat-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-init-ack-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-init-ack-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-init-ack-param-state-cookie-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-init-ack-param-state-cookie-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-init-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-init-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-init-param-host-name-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-init-param-host-name-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-init-param-ipv4-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-init-param-ipv4-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-init-param-ipv6-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-init-param-ipv6-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-sack-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-sack-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-shutdown-ack-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-shutdown-ack-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-shutdown-complete-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-shutdown-complete-header.gif -------------------------------------------------------------------------------- /images/sctp-chunk-shutdown-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunk-shutdown-header.gif -------------------------------------------------------------------------------- /images/sctp-chunks-generic-fields.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-chunks-generic-fields.gif -------------------------------------------------------------------------------- /images/sctp-common-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-common-header.gif -------------------------------------------------------------------------------- /images/sctp-generic-header.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/sctp-generic-header.gif -------------------------------------------------------------------------------- /images/state-icmp-ping.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/state-icmp-ping.gif -------------------------------------------------------------------------------- /images/state-tcp-client-subconn.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/state-tcp-client-subconn.gif -------------------------------------------------------------------------------- /images/state-tcp-closing.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/state-tcp-closing.gif -------------------------------------------------------------------------------- /images/state-tcp-connecting.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/state-tcp-connecting.gif -------------------------------------------------------------------------------- /images/state-tcp-icmp-reply.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/state-tcp-icmp-reply.gif -------------------------------------------------------------------------------- /images/state-tcp-server-subconn.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/state-tcp-server-subconn.gif -------------------------------------------------------------------------------- /images/state-udp-connection.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/state-udp-connection.gif -------------------------------------------------------------------------------- /images/state-udp-icmp-reply.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/state-udp-icmp-reply.gif -------------------------------------------------------------------------------- /images/table_subtraverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/table_subtraverse.gif -------------------------------------------------------------------------------- /images/tables_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/tables_traverse.gif -------------------------------------------------------------------------------- /images/tablesnchains_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/tablesnchains_traverse.gif -------------------------------------------------------------------------------- /images/tcp-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/tcp-headers.gif -------------------------------------------------------------------------------- /images/templates/admons/caution.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/caution.gif -------------------------------------------------------------------------------- /images/templates/admons/caution.tif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/caution.tif -------------------------------------------------------------------------------- /images/templates/admons/important.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/important.gif -------------------------------------------------------------------------------- /images/templates/admons/important.tif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/important.tif -------------------------------------------------------------------------------- /images/templates/admons/note.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/note.gif -------------------------------------------------------------------------------- /images/templates/admons/note.tif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/note.tif -------------------------------------------------------------------------------- /images/templates/admons/note2.tif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/note2.tif -------------------------------------------------------------------------------- /images/templates/admons/tip.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/tip.gif -------------------------------------------------------------------------------- /images/templates/admons/tip.tif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/tip.tif -------------------------------------------------------------------------------- /images/templates/admons/warning.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/warning.gif -------------------------------------------------------------------------------- /images/templates/admons/warning.tif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/admons/warning.tif -------------------------------------------------------------------------------- /images/templates/dias/cisco-pix-dmz-lan.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/cisco-pix-dmz-lan.dia -------------------------------------------------------------------------------- /images/templates/dias/nat-machine.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/nat-machine.dia -------------------------------------------------------------------------------- /images/templates/dias/packet_traverse.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/packet_traverse.dia -------------------------------------------------------------------------------- /images/templates/dias/packet_traverse_FORWARD.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/packet_traverse_FORWARD.dia -------------------------------------------------------------------------------- /images/templates/dias/packet_traverse_INPUT.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/packet_traverse_INPUT.dia -------------------------------------------------------------------------------- /images/templates/dias/packet_traverse_OUTPUT.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/packet_traverse_OUTPUT.dia -------------------------------------------------------------------------------- /images/templates/dias/rc_DHCP_firewall.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/rc_DHCP_firewall.dia -------------------------------------------------------------------------------- /images/templates/dias/rc_DMZ_firewall.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/rc_DMZ_firewall.dia -------------------------------------------------------------------------------- /images/templates/dias/rc_UTIN_firewall.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/rc_UTIN_firewall.dia -------------------------------------------------------------------------------- /images/templates/dias/rc_firewall.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/rc_firewall.dia -------------------------------------------------------------------------------- /images/templates/dias/state-icmp-ping.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/state-icmp-ping.dia -------------------------------------------------------------------------------- /images/templates/dias/state-tcp-client-subconn.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/state-tcp-client-subconn.dia -------------------------------------------------------------------------------- /images/templates/dias/state-tcp-closing.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/state-tcp-closing.dia -------------------------------------------------------------------------------- /images/templates/dias/state-tcp-connecting.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/state-tcp-connecting.dia -------------------------------------------------------------------------------- /images/templates/dias/state-tcp-icmp-reply.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/state-tcp-icmp-reply.dia -------------------------------------------------------------------------------- /images/templates/dias/state-tcp-server-subconn.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/state-tcp-server-subconn.dia -------------------------------------------------------------------------------- /images/templates/dias/state-udp-connection.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/state-udp-connection.dia -------------------------------------------------------------------------------- /images/templates/dias/state-udp-icmp-reply.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/state-udp-icmp-reply.dia -------------------------------------------------------------------------------- /images/templates/dias/table_subtraverse.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/table_subtraverse.dia -------------------------------------------------------------------------------- /images/templates/dias/tables_traverse.dia: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/dias/tables_traverse.dia -------------------------------------------------------------------------------- /images/templates/new/html.dsl: -------------------------------------------------------------------------------- 1 | 3 | ]> 4 | 5 | 6 | 7 | 8 | 9 | ;; $Id: html.dsl,v 1.1 2006-10-18 13:19:32 blueflux Exp $ 10 | ;; 11 | ;; This file is part of the Modular DocBook Stylesheet distribution. 12 | ;; See ../README or http://www.berkshire.net/~norm/dsssl/ 13 | ;; 14 | ;; Example of a customization layer on top of the modular docbook style 15 | ;; sheet. Definitions inserted in this file take precedence over 16 | ;; definitions in the 'use'd stylesheet(s). 17 | 18 | (define %title-font-family% 19 | "Arial") 20 | (define %body-font-family% 21 | "Arial") 22 | (define %mono-font-family% 23 | "Arial") 24 | (define %admon-font-family% 25 | "Arial") 26 | (define %command-font-family% 27 | "Courier New") 28 | 29 | (define %stylesheet% "table.css") 30 | 31 | (define %admon-graphics% 32 | #t) 33 | (define %admon-graphics-path% 34 | "images/") 35 | 36 | (element command 37 | (make sequence 38 | font-family-name: %mono-font-family% 39 | font-weight: 'bold 40 | )) 41 | 42 | (element literallayout 43 | (make sequence 44 | font-family-name: %mono-font-family% 45 | )) 46 | 47 | (element systemitem 48 | (make sequence 49 | font-family-name: %mono-font-family% 50 | font-weight: 'normal 51 | font-posture: 'italic 52 | )) 53 | 54 | (element computeroutput 55 | (make sequence 56 | font-family-name: %mono-font-family% 57 | font-weight: 'bold 58 | font-posture: 'italic 59 | )) 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | -------------------------------------------------------------------------------- /images/templates/new/icmp-information-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | Internet Control Message Protocol - Information Request/Information Reply Message 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type 84 | Code 85 | Checksum 86 | 87 | 88 | 89 | Identifier 90 | Sequence Number 91 | 92 | 93 | 94 | 95 | 96 |
97 | 98 | -------------------------------------------------------------------------------- /images/templates/new/remember.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | file=index.sgml 3 | rm $file 4 | sgmlfiles=`ls *.sgml` 5 | 6 | # create sgml files from txt files. 7 | #for fil in ./*.txt; do 8 | #FIXME 9 | #done 10 | 11 | # create all over sgml file. 12 | echo "> $file 13 | for fil in $sgmlfiles; do 14 | entity=`basename $fil .sgml` 15 | echo "" >> $file 16 | done 17 | echo "]>Headers" >> $file 18 | for fil in $sgmlfiles; do 19 | entity=`basename $fil .sgml` 20 | echo "&${entity};" >> $file 21 | done 22 | echo "" >> $file 23 | 24 | # Translate to html 25 | jw -b html --nochunks -d html.dsl $file 26 | htmlfile=`basename $file .sgml`.html 27 | htmltemp=${htmlfile}.temp 28 | tidy -o $htmltemp $htmlfile 29 | 30 | # Make html tags better suited for css style-sheets 31 | cat $htmltemp |sed \ 32 | -e 's/0<\/th>/0<\/th>/g' \ 33 | -e 's/\([123]\)<\/th>/\1<\/th>/g' \ 34 | -e 's/ <\/th>/\ <\/th>/g' \ 35 | -e 's/0<\/th>/0<\/th>/g' \ 36 | -e 's/ <\/th>/\ <\/th>/g' \ 37 | -e 's/\([1-9]\)<\/th>/\1<\/th>/g' | \ 38 | sed -e '/[ \t]*$/{ 39 | N 40 | } 41 | s/\n0<\/th>/\n0<\/th>/g' \ 42 | > $htmlfile 43 | 44 | rm $htmltemp 45 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-abort-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | ABORT chunk headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 6 84 | Reserved 85 | 86 | T 87 | Length 88 | 89 | 90 | 91 | Zero or more Error Causes 92 | 93 | 94 | 95 | 96 | 97 |
98 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-abort-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 6 |Reserved |T| Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | \ \ 7 | / zero or more Error Causes / 8 | \ \ 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | 11 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-cookie-ack-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | COOKIE ACK chunk headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 11 84 | Chunk Flags 85 | Length = 4 86 | 87 | 88 | 89 | 90 | 91 |
92 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-cookie-ack-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 11 |Chunk Flags | Length = 4 | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | 7 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-cookie-echo-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | COOKIE ECHO chunk headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 10 84 | Chunk Flags 85 | Length 86 | 87 | 88 | 89 | Cookie 90 | 91 | 92 | 93 | 94 | 95 |
96 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-cookie-echo-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 10 |Chunk Flags | Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | / Cookie / 7 | \ \ 8 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 9 | 10 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-data-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 0 | Reserved|U|B|E| Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | | TSN | 7 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 8 | | Stream Identifier S | Stream Sequence Number n | 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | | Payload Protocol Identifier | 11 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 12 | \ \ 13 | / User Data (seq n of Stream S) / 14 | \ \ 15 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 16 | 17 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-error-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | ERROR chunk headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 9 84 | Chunk Flags 85 | Length 86 | 87 | 88 | 89 | one or more Error Causes 90 | 91 | 92 | 93 | 94 | 95 |
96 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-error-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 9 | Chunk Flags | Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | \ \ 7 | / one or more Error Causes / 8 | \ \ 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | 11 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-heartbeat-ack-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | HEARTBEAT ACK chunk headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 5 84 | Chunk Flags 85 | Length 86 | 87 | 88 | 89 | Heartbeat Information TLV 90 | 91 | 92 | 93 | 94 | 95 |
96 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-heartbeat-ack-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 5 | Chunk Flags | Heartbeat Ack Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | \ \ 7 | / Heartbeat Information TLV (Variable-Length) / 8 | \ \ 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | 11 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-heartbeat-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | HEARTBEAT chunk headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 4 84 | Chunk Flags 85 | Length 86 | 87 | 88 | 89 | Heartbeat Information TLV 90 | 91 | 92 | 93 | 94 | 95 |
96 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-heartbeat-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 4 | Chunk Flags | Heartbeat Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | \ \ 7 | / Heartbeat Information TLV (Variable-Length) / 8 | \ \ 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | 11 | 12 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-init-ack-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 2 | Chunk Flags | Chunk Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | | Initiate Tag | 7 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 8 | | Advertised Receiver Window Credit | 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | | Number of Outbound Streams | Number of Inbound Streams | 11 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 12 | | Initial TSN | 13 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 14 | \ \ 15 | / Optional/Variable-Length Parameters / 16 | \ \ 17 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 18 | 19 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-init-ack-param-state-cookie-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | State Cookie Parameter headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 7 84 | Length 85 | 86 | 87 | 88 | State Cookie Parameter 89 | 90 | 91 | 92 | 93 | 94 |
95 | 96 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-init-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 1 | Chunk Flags | Chunk Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | | Initiate Tag | 7 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 8 | | Advertised Receiver Window Credit (a_rwnd) | 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | | Number of Outbound Streams | Number of Inbound Streams | 11 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 12 | | Initial TSN | 13 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 14 | \ \ 15 | / Optional/Variable-Length Parameters / 16 | \ \ 17 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 18 | 19 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-init-param-host-name-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | Hostname Parameter headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 11 84 | Length 85 | 86 | 87 | 88 | Host Name 89 | 90 | 91 | 92 | 93 | 94 |
95 | 96 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-init-param-host-name-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 11 | Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | / Host Name / 7 | \ \ 8 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 9 | 10 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-init-param-ipv4-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | IPv4 Parameter headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 5 84 | Length = 8 85 | 86 | 87 | 88 | IPv4 Address 89 | 90 | 91 | 92 | 93 | 94 |
95 | 96 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-init-param-ipv4-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 5 | Length = 8 | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | | IPv4 Address | 7 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 8 | 9 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-init-param-ipv6-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | IPv6 Parameter headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 6 84 | Length = 20 85 | 86 | 87 | 88 | IPv6 Address 89 | 90 | 91 | 92 | 93 | 94 |
95 | 96 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-init-param-ipv6-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 6 | Length = 20 | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | | | 7 | | IPv6 Address | 8 | | | 9 | | | 10 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 11 | 12 | 13 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-sack-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 3 |Chunk Flags | Chunk Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | | Cumulative TSN Ack | 7 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 8 | | Advertised Receiver Window Credit (a_rwnd) | 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | | Number of Gap Ack Blocks = N | Number of Duplicate TSNs = X | 11 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 12 | | Gap Ack Block #1 Start | Gap Ack Block #1 End | 13 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 14 | / / 15 | \ ... \ 16 | / / 17 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 18 | | Gap Ack Block #N Start | Gap Ack Block #N End | 19 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 20 | | Duplicate TSN 1 | 21 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 22 | / / 23 | \ ... \ 24 | / / 25 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 26 | | Duplicate TSN X | 27 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 28 | 29 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-shutdown-ack-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | SHUTDOWN ACK chunk headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 8 84 | Chunk Flags 85 | Length = 4 86 | 87 | 88 | 89 | 90 | 91 |
92 | 93 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-shutdown-ack-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 8 |Chunk Flags | Length = 4 | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | 7 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-shutdown-complete-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | SHUTDOWN COMPLETE chunk headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 14 84 | Reserved 85 | T 86 | Length = 4 87 | 88 | 89 | 90 | 91 | 92 |
93 | 94 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-shutdown-complete-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 14 |Reserved |T| Length = 4 | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | 7 | 8 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-shutdown-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | SHUTDOWN chunk headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 7 84 | Chunk Flags 85 | Length = 8 86 | 87 | 88 | 89 | Cumulative TSN Ack 90 | 91 | 92 | 93 | 94 | 95 |
96 | 97 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunk-shutdown-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Type = 7 | Chunk Flags | Length = 8 | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | | Cumulative TSN Ack | 7 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 8 | 9 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunks-generic-fields.sgml: -------------------------------------------------------------------------------- 1 | 2 | Generic chunk headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type 84 | Chunk Flags 85 | Chunk Length 86 | 87 | 88 | 89 | Chunk Value 90 | 91 | 92 | 93 | 94 | 95 |
96 | 97 | -------------------------------------------------------------------------------- /images/templates/new/sctp-chunks-generic-fields.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Chunk Type | Chunk Flags | Chunk Length | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | \ \ 7 | / Chunk Value / 8 | \ \ 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | 11 | -------------------------------------------------------------------------------- /images/templates/new/sctp-common-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | Common SCTP headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Source Port 84 | Destination Port 85 | 86 | 87 | 88 | Verification Tag 89 | 90 | 91 | 92 | Checksum 93 | 94 | 95 | 96 | 97 | 98 |
99 | 100 | -------------------------------------------------------------------------------- /images/templates/new/sctp-common-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Source Port Number | Destination Port Number | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | | Verification Tag | 7 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 8 | | Checksum | 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | 11 | -------------------------------------------------------------------------------- /images/templates/new/sctp-generic-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | Generic chunk headerlayout 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | 84 | Common header 85 | 86 | 87 | 88 | Chunk #1 89 | 90 | 91 | 92 | ... 93 | 94 | 95 | 96 | Chunk #n 97 | 98 | 99 | 100 | 101 | 102 |
103 | 104 | -------------------------------------------------------------------------------- /images/templates/new/sctp-generic-header.txt: -------------------------------------------------------------------------------- 1 | 0 1 2 3 2 | 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 3 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 4 | | Common Header | 5 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 6 | | Chunk #1 | 7 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 8 | | ... | 9 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 10 | | Chunk #n | 11 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 12 | 13 | 14 | -------------------------------------------------------------------------------- /images/templates/new/table.css: -------------------------------------------------------------------------------- 1 | table.CALSTABLE 2 | { 3 | width: 900px; 4 | border: medium solid #000000; 5 | border-spacing: 0; 6 | text-align: center; 7 | } 8 | 9 | th 10 | { 11 | border: none; 12 | } 13 | 14 | .firsttr 15 | { 16 | background-color: #bbbbbb; 17 | text-align: center; 18 | } 19 | 20 | .firsttr0 21 | { 22 | background-color: #bbbbbb; 23 | border-left: medium solid #000000; 24 | border-bottom: none; 25 | text-align: center; 26 | } 27 | 28 | .secondtrstartth 29 | { 30 | background-color: #bbbbbb; 31 | border-left: none; 32 | border-bottom: medium solid #000000; 33 | } 34 | 35 | .secondtr0 36 | { 37 | background-color: #bbbbbb; 38 | border-left: medium solid #000000; 39 | border-bottom: medium solid #000000; 40 | } 41 | 42 | .secondtr 43 | { 44 | background-color: #bbbbbb; 45 | border-left: thin solid #000000; 46 | border-bottom: medium solid #000000; 47 | } 48 | 49 | td 50 | { 51 | border: none; 52 | border-top: none; 53 | border-right: none; 54 | border-bottom: thin solid #000000; 55 | border-left: thin solid #000000; 56 | } 57 | 58 | -------------------------------------------------------------------------------- /images/templates/new/template-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | template headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Type = 6 84 | Reserved 85 | 86 | T 87 | Length 88 | 89 | 90 | 91 | Zero or more Error Causes 92 | 93 | 94 | 95 | 96 | 97 |
98 | 99 | -------------------------------------------------------------------------------- /images/templates/new/udp-header.sgml: -------------------------------------------------------------------------------- 1 | 2 | User Datagram Protocol headers 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 0 40 | 1 41 | 2 42 | 3 43 | 44 | 45 | 46 | 0 47 | 1 48 | 2 49 | 3 50 | 4 51 | 5 52 | 6 53 | 7 54 | 8 55 | 9 56 | 0 57 | 1 58 | 2 59 | 3 60 | 4 61 | 5 62 | 6 63 | 7 64 | 8 65 | 9 66 | 0 67 | 1 68 | 2 69 | 3 70 | 4 71 | 5 72 | 6 73 | 7 74 | 8 75 | 9 76 | 0 77 | 1 78 | 79 | 80 | 81 | 82 | 83 | Source Port 84 | Destination Port 85 | 86 | 87 | 88 | Length 89 | Checksum 90 | 91 | 92 | 93 | Data 94 | 95 | 96 | 97 | 98 | 99 |
100 | 101 | -------------------------------------------------------------------------------- /images/templates/tcpipreferencestuff.sxc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/templates/tcpipreferencestuff.sxc -------------------------------------------------------------------------------- /images/tip.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/tip.gif -------------------------------------------------------------------------------- /images/turtlefirewall-items.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/turtlefirewall-items.gif -------------------------------------------------------------------------------- /images/turtlefirewall-main-screen.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/turtlefirewall-main-screen.gif -------------------------------------------------------------------------------- /images/udp-headers.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/udp-headers.gif -------------------------------------------------------------------------------- /images/warning.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/images/warning.gif -------------------------------------------------------------------------------- /other/firewall_rules_table_final.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/other/firewall_rules_table_final.pdf -------------------------------------------------------------------------------- /other/ip_dynaddr.txt: -------------------------------------------------------------------------------- 1 | IP dynamic address hack-port v0.03-rst2 2 | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 3 | This stuff allows diald ONESHOT connections to get established by 4 | dynamically changing packet source address (and socket's if local procs). 5 | It is implemented for TCP diald-box connections(1) and IP_MASQuerading(2). 6 | 7 | If enabled[*] and forwarding interface address has changed: 8 | 1) Socket (and packet) source address is rewritten ON RETRANSMISSIONS 9 | while in SYN_SENT state (diald-box processes). 10 | 2) Out-bounded MASQueraded source address changes ON OUTPUT (when 11 | internal host does retransmission) until a packet from outside 12 | is received by the tunnel. This is specially helpful for auto 13 | dialup links (diald), where the "actual" outgoing address is 14 | unknown at the moment the link is going up. So, the *same* 15 | (local AND masqueraded) connections requests that bring the link 16 | up will be able to get established. 17 | 18 | If you enable the RST-provoking mode, then the source address will 19 | be changed, even if the socket is established. This means we send 20 | an incorrect packet out, which causes the remote host to kill our 21 | socket. This is the desired behaviour, because such a socket is 22 | doomed anyway, and the earlier it dies, the better. This prevents 23 | the dial-on-demand connection from being kept up by a dead connection, 24 | and tells the application that the connection was lost. 25 | 26 | With the RST-provoking mode enabled it happens packets with the address 27 | of another interface as source are rewritten and get a new source address 28 | this way. If you have asymetric routing and the other interfaces have 29 | static addresses enabling the work-around might[**] help you. 30 | 31 | [*] At boot, by default no address rewriting is attempted. 32 | [**] This code is currently totaly untested. 33 | 34 | The values for the ip_dynaddr sysctl are: 35 | 36 | 1: To enable: 37 | 2: To enable verbosity: 38 | 4: To enable RST-provoking: 39 | 8: To enable asymetric routing work-around 40 | 41 | Flags can be combined by adding them. Common settings 42 | would be: 43 | 44 | To switch off special handling of dynamic addresses (default) 45 | # echo 0 > /proc/sys/net/ipv4/ip_dynaddr 46 | To enable rewriting in quiet mode: 47 | # echo 1 > /proc/sys/net/ipv4/ip_dynaddr 48 | To enable rewriting in verbose mode: 49 | # echo 3 > /proc/sys/net/ipv4/ip_dynaddr 50 | (for backwards compatibility you can also use) 51 | # echo 2 > /proc/sys/net/ipv4/ip_dynaddr 52 | To enable quiet RST-provoking mode: 53 | # echo 5 > /proc/sys/net/ipv4/ip_dynaddr 54 | To enable verbose RST-provoking mode: 55 | # echo 7 > /proc/sys/net/ipv4/ip_dynaddr 56 | To enable quiet RST-provoking mode with asymetric routing work-around: 57 | # echo 13 > /proc/sys/net/ipv4/ip_dynaddr 58 | To enable verbose RST-provoking mode with asymetric routing work-around: 59 | # echo 15 > /proc/sys/net/ipv4/ip_dynaddr 60 | 61 | Enjoy! 62 | 63 | -- Juanjo 64 | (with RST-provoking mode by Erik Corry and asymetric routing 65 | work-around by Michael Mueller ) -------------------------------------------------------------------------------- /portuguese/ChangeLog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/ChangeLog -------------------------------------------------------------------------------- /portuguese/TODO: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/TODO -------------------------------------------------------------------------------- /portuguese/appendices/acknowledgements.sgml: -------------------------------------------------------------------------------- 1 | 2 | Acknowledgements 3 | 4 | I would like to thank the following people for their help on this document: 5 | 6 | 7 | 8 | 9 | 10 | 11 | Fabrice 12 | Marie, For major updates to my horrible grammar and spelling. 13 | Also a huge thanks for updating the tutorial to DocBook format with make files 14 | etc. 15 | 16 | 17 | 18 | 19 | 20 | Marc 21 | Boucher, For helping me out on some aspects on using the 22 | state matching code. 23 | 24 | 25 | 26 | 27 | 28 | Frode E. 29 | Nyboe, For greatly improving the 30 | rc.firewall rules and giving great inspiration while 31 | i was to rewrite the ruleset and being the one who introduced the multiple table 32 | traversing into the same file. 33 | 34 | 35 | 36 | 37 | 38 | Chapman 39 | Brad, Alexander W. 41 | Janssen, Both for making me realize I was thinking wrong 42 | about how packets traverse the basic NAT and filters tables and in which order 43 | they show up. 44 | 45 | 46 | 47 | 48 | Michiel 49 | Brandenburg, Myles 51 | Uyema, For helping me out with some of the state matching 52 | code and getting it to work. 53 | 54 | 55 | 56 | 57 | 58 | Kent `Artech' 59 | Stahre, For helping me out with the graphics. I know I suck 60 | at graphics, and you're better than most I know who do graphics;). Also thanks 61 | for checking the tutorial for errors etc. 62 | 63 | 64 | 65 | 66 | 67 | Anders 'DeZENT' Johansson, For hinting me about 68 | strange ISP's and so on that uses reserved networks on the Internet, or at 69 | least on the internet for you. 70 | 71 | 72 | 73 | 74 | 75 | Jeremy 76 | `Spliffy' Smith, For giving me hints at stuff that might 77 | screw up for people and for trying it out and checking for errors in what I've 78 | written. 79 | 80 | 81 | 82 | 83 | And of course everyone else I talked to and asked for comments on this file, 84 | sorry for not mentioning everyone. 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | -------------------------------------------------------------------------------- /portuguese/appendices/history.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/appendices/history.sgml -------------------------------------------------------------------------------- /portuguese/appendices/script_codebase.sgml: -------------------------------------------------------------------------------- 1 | 2 | Example scripts codebase 3 |
4 | Example rc.firewall script 5 | 6 | 7 | 8 | &rcfirewall; 9 | 10 | 11 | 12 |
13 | 14 |
15 | Example rc.DMZ.firewall script 16 | 17 | 18 | 19 | &rcdmzfirewall; 20 | 21 | 22 | 23 |
24 | 25 |
26 | Example rc.UTIN.firewall script 27 | 28 | 29 | 30 | &rcutinfirewall; 31 | 32 | 33 | 34 |
35 | 36 |
37 | Example rc.DHCP.firewall script 38 | 39 | 40 | 41 | &rcdhcpfirewall; 42 | 43 | 44 | 45 |
46 | 47 |
48 | Example rc.flush-iptables script 49 | 50 | 51 | 52 | &flushtables; 53 | 54 | 55 | 56 |
57 | 58 |
59 | Example rc.test-iptables script 60 | 61 | 62 | 63 | &testtables; 64 | 65 | 66 | 67 |
68 | 69 | 70 | 71 | 72 | -------------------------------------------------------------------------------- /portuguese/bookinfo.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/bookinfo.sgml -------------------------------------------------------------------------------- /portuguese/chapters/introduction.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/chapters/introduction.sgml -------------------------------------------------------------------------------- /portuguese/chapters/preparations.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/chapters/preparations.sgml -------------------------------------------------------------------------------- /portuguese/images/caution.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/caution.gif -------------------------------------------------------------------------------- /portuguese/images/convsize.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | for [$afile in 'ls']; then 4 | $tmpfile='basename $afile .gif'+2.gif 5 | 6 | convert -geometry 80% $afile $tmpfile 7 | rm -f $afile 8 | mv $tmpfile $afile 9 | done -------------------------------------------------------------------------------- /portuguese/images/note.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/note.gif -------------------------------------------------------------------------------- /portuguese/images/packet_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/packet_traverse.gif -------------------------------------------------------------------------------- /portuguese/images/packet_traverse_FORWARD.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/packet_traverse_FORWARD.gif -------------------------------------------------------------------------------- /portuguese/images/packet_traverse_INPUT.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/packet_traverse_INPUT.gif -------------------------------------------------------------------------------- /portuguese/images/packet_traverse_OUTPUT.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/packet_traverse_OUTPUT.gif -------------------------------------------------------------------------------- /portuguese/images/rc.DHCP.firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/rc.DHCP.firewall.gif -------------------------------------------------------------------------------- /portuguese/images/rc.DMZ.firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/rc.DMZ.firewall.gif -------------------------------------------------------------------------------- /portuguese/images/rc.UTIN.firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/rc.UTIN.firewall.gif -------------------------------------------------------------------------------- /portuguese/images/rc.firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/rc.firewall.gif -------------------------------------------------------------------------------- /portuguese/images/rc_DHCP_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/rc_DHCP_firewall.gif -------------------------------------------------------------------------------- /portuguese/images/rc_DMZ_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/rc_DMZ_firewall.gif -------------------------------------------------------------------------------- /portuguese/images/rc_UTIN_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/rc_UTIN_firewall.gif -------------------------------------------------------------------------------- /portuguese/images/rc_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/rc_firewall.gif -------------------------------------------------------------------------------- /portuguese/images/state-icmp-ping.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/state-icmp-ping.gif -------------------------------------------------------------------------------- /portuguese/images/state-tcp-client-subconn.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/state-tcp-client-subconn.gif -------------------------------------------------------------------------------- /portuguese/images/state-tcp-closing.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/state-tcp-closing.gif -------------------------------------------------------------------------------- /portuguese/images/state-tcp-connecting.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/state-tcp-connecting.gif -------------------------------------------------------------------------------- /portuguese/images/state-tcp-icmp-reply.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/state-tcp-icmp-reply.gif -------------------------------------------------------------------------------- /portuguese/images/state-tcp-server-subconn.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/state-tcp-server-subconn.gif -------------------------------------------------------------------------------- /portuguese/images/state-udp-connection.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/state-udp-connection.gif -------------------------------------------------------------------------------- /portuguese/images/state-udp-icmp-reply.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/state-udp-icmp-reply.gif -------------------------------------------------------------------------------- /portuguese/images/tables_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/tables_traverse.gif -------------------------------------------------------------------------------- /portuguese/images/tablesnchains_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/tablesnchains_traverse.gif -------------------------------------------------------------------------------- /portuguese/images/templates/Image13.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/Image13.psp -------------------------------------------------------------------------------- /portuguese/images/templates/figurer.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/figurer.gif -------------------------------------------------------------------------------- /portuguese/images/templates/packet_traverse.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/packet_traverse.psp -------------------------------------------------------------------------------- /portuguese/images/templates/pilar.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/pilar.gif -------------------------------------------------------------------------------- /portuguese/images/templates/rc.DHCP.firewall.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/rc.DHCP.firewall.psp -------------------------------------------------------------------------------- /portuguese/images/templates/rc.UTIN.firewall.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/rc.UTIN.firewall.psp -------------------------------------------------------------------------------- /portuguese/images/templates/rc.firewall.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/rc.firewall.psp -------------------------------------------------------------------------------- /portuguese/images/templates/state-icmp-ping.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/state-icmp-ping.png -------------------------------------------------------------------------------- /portuguese/images/templates/state-tcp-client-subconn.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/state-tcp-client-subconn.png -------------------------------------------------------------------------------- /portuguese/images/templates/state-tcp-closing.kpr: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/state-tcp-closing.kpr -------------------------------------------------------------------------------- /portuguese/images/templates/state-tcp-closing.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/state-tcp-closing.png -------------------------------------------------------------------------------- /portuguese/images/templates/state-tcp-connecting.kpr: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/state-tcp-connecting.kpr -------------------------------------------------------------------------------- /portuguese/images/templates/state-tcp-connecting.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/state-tcp-connecting.png -------------------------------------------------------------------------------- /portuguese/images/templates/state-tcp-icmp-reply.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/state-tcp-icmp-reply.png -------------------------------------------------------------------------------- /portuguese/images/templates/state-tcp-server-subconn.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/state-tcp-server-subconn.png -------------------------------------------------------------------------------- /portuguese/images/templates/state-udp-connection.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/state-udp-connection.png -------------------------------------------------------------------------------- /portuguese/images/templates/state-udp-icmp-reply.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/state-udp-icmp-reply.png -------------------------------------------------------------------------------- /portuguese/images/templates/tablenchains_traverse.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/tablenchains_traverse.psp -------------------------------------------------------------------------------- /portuguese/images/templates/tablenchains_traverse2.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/tablenchains_traverse2.psp -------------------------------------------------------------------------------- /portuguese/images/templates/tables_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/tables_traverse.gif -------------------------------------------------------------------------------- /portuguese/images/templates/tables_traverse.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/tables_traverse.psp -------------------------------------------------------------------------------- /portuguese/images/templates/tables_traverse2.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/templates/tables_traverse2.psp -------------------------------------------------------------------------------- /portuguese/images/warning.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/images/warning.gif -------------------------------------------------------------------------------- /portuguese/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/portuguese/index.html -------------------------------------------------------------------------------- /portuguese/iptables-tutorial.sgml: -------------------------------------------------------------------------------- 1 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | ]> 29 | 30 | 31 | 32 | &bookinfo; 33 | 34 | 35 | 36 | &introduction; 37 | 38 | &preparations; 39 | 40 | &traversingoftablesandchains; 41 | 42 | &statemachinesgml; 43 | 44 | &howaruleisbuilt; 45 | 46 | &rcfirewallsgml; 47 | 48 | &examplescripts; 49 | 50 | &detailedexplanations; 51 | 52 | &commonproblems; 53 | 54 | &ICMPtypes; 55 | 56 | &otherresources; 57 | 58 | &acknowledgements; 59 | 60 | &history; 61 | 62 | &gfdl; 63 | 64 | &gpl; 65 | 66 | &scriptcodebase; 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | -------------------------------------------------------------------------------- /portuguese/mirrors.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | Mirrors of the IPTables-tutorial 4 | 5 | 6 | Mirrors marked with a * where down the last time I checked, if they're still down 7 | the next time I check them, they go out of this file. 8 |

9 | Complete mirrors: 10 |
11 | - http://iptables-tutorial.frozentux.net 13 |
Maintainer: Jacco van Koll, 14 | Oscar Andreasson 15 |

16 | - http://people.unix-fu.org/andreasson/ 18 |
Maintainer: Oscar Andreasson 19 |

20 | - http://www.linux-sxs.org/iptables/ 22 |
Maintainer: Lonni 23 |

24 | - http://www.linuxsecurity.com/resource_files/firewalls/IPTables-Tutorial 26 |
Maintainer: Dave Wreski 27 |

28 | - http://www.linuxvoodoo.com/howto/iptables/index.html 29 |
Maintainer: Will Cline(?) 30 |

31 | - http://www.iptables.com.br/iptablesTutorial 32 |
Maintainer: Rodrigo Rubira Branco 33 |

34 | - http://www.jollycom.ca/iptables-tutorial/ 35 |
Maintainer: Neil Jolly 36 |

37 | - http://www.linuxguruz.org/mirrors/people.unix-fu.org/htdocs/ 39 |
Maintainer: XXXX 40 |

41 | - http://www.unixcircle.com/iptables 43 |
Maintainer: Thang 44 |

45 | 46 | 47 | 48 | -------------------------------------------------------------------------------- /portuguese/other/ip_dynaddr.txt: -------------------------------------------------------------------------------- 1 | IP dynamic address hack-port v0.03 2 | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 3 | This stuff allows diald ONESHOT connections to get established by 4 | dynamically changing packet source address (and socket's if local procs). 5 | It is implemented for TCP diald-box connections(1) and IP_MASQuerading(2). 6 | 7 | If enabled[*] and forwarding interface has changed: 8 | 1) Socket (and packet) source address is rewritten ON RETRANSMISSIONS 9 | while in SYN_SENT state (diald-box processes). 10 | 2) Out-bounded MASQueraded source address changes ON OUTPUT (when 11 | internal host does retransmission) until a packet from outside is 12 | received by the tunnel. 13 | 14 | This is specially helpful for auto dialup links (diald), where the 15 | ``actual'' outgoing address is unknown at the moment the link is 16 | going up. So, the *same* (local AND masqueraded) connections requests that 17 | bring the link up will be able to get established. 18 | 19 | [*] At boot, by default no address rewriting is attempted. 20 | To enable: 21 | # echo 1 > /proc/sys/net/ipv4/ip_dynaddr 22 | To enable verbose mode: 23 | # echo 2 > /proc/sys/net/ipv4/ip_dynaddr 24 | To disable (default) 25 | # echo 0 > /proc/sys/net/ipv4/ip_dynaddr 26 | 27 | Enjoy! 28 | 29 | -- Juanjo 30 | -------------------------------------------------------------------------------- /portuguese/scripts/iptsave-ruleset.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # pid-owner.txt - Example rule on how the sid-owner match could be used. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | INET_IFACE="eth0" 23 | INET_IP="195.233.192.1" 24 | 25 | LAN_IFACE="eth1" 26 | 27 | iptables -P INPUT DROP 28 | iptables -P OUTPUT DROP 29 | iptables -P FORWARD DROP 30 | 31 | 32 | iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT 33 | 34 | iptables -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT 35 | 36 | iptables -A FORWARD -i $INET_IFACE -m state --state ESTABLISHED,RELATED -j ACCEPT 37 | iptables -A FORWARD -i $LAN_IFACE -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT 38 | 39 | iptables -t nat -A POSTROUTING -o $INET_IFACE -j SNAT --to-source $INET_IP 40 | 41 | 42 | -------------------------------------------------------------------------------- /portuguese/scripts/iptsave-saved.txt: -------------------------------------------------------------------------------- 1 | # Generated by iptables-save v1.2.5 on Tue Apr 23 21:33:34 2002 2 | *mangle 3 | :PREROUTING ACCEPT [0:0] 4 | :INPUT ACCEPT [104:14687] 5 | :FORWARD ACCEPT [0:0] 6 | :OUTPUT ACCEPT [0:0] 7 | :POSTROUTING ACCEPT [42:4676] 8 | COMMIT 9 | # Completed on Tue Apr 23 21:33:34 2002 10 | # Generated by iptables-save v1.2.5 on Tue Apr 23 21:33:34 2002 11 | *nat 12 | :PREROUTING ACCEPT [0:0] 13 | :POSTROUTING ACCEPT [0:0] 14 | :OUTPUT ACCEPT [0:0] 15 | COMMIT 16 | # Completed on Tue Apr 23 21:33:34 2002 17 | # Generated by iptables-save v1.2.5 on Tue Apr 23 21:33:34 2002 18 | *filter 19 | :INPUT ACCEPT [0:0] 20 | :FORWARD ACCEPT [0:0] 21 | :OUTPUT ACCEPT [0:0] 22 | COMMIT 23 | # Completed on Tue Apr 23 21:33:34 2002 24 | -------------------------------------------------------------------------------- /portuguese/scripts/limit-match.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # pid-owner.txt - Example rule on how the sid-owner match could be used. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | iptables -A INPUT -p icmp --icmp-type echo-reply -m limit --limit \ 23 | 3/minute --limit-burst 5 -j DROP 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /portuguese/scripts/pid-owner.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # pid-owner.txt - Example rule on how the pid-owner match could be used. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | PID=`ps aux |grep inetd |head -n 1 |cut -b 10-14` 23 | 24 | /usr/local/sbin/iptables -A OUTPUT -p TCP -m owner --pid-owner $PID -j ACCEPT 25 | 26 | 27 | -------------------------------------------------------------------------------- /portuguese/scripts/rc.flush-iptables.txt: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | # 3 | # rc.flush-iptables - Resets iptables to default values. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | 21 | # 22 | # Configurations 23 | # 24 | IPTABLES="/usr/sbin/iptables" 25 | 26 | # 27 | # reset the default policies in the filter table. 28 | # 29 | $IPTABLES -P INPUT ACCEPT 30 | $IPTABLES -P FORWARD ACCEPT 31 | $IPTABLES -P OUTPUT ACCEPT 32 | 33 | # 34 | # reset the default policies in the nat table. 35 | # 36 | $IPTABLES -t nat -P PREROUTING ACCEPT 37 | $IPTABLES -t nat -P POSTROUTING ACCEPT 38 | $IPTABLES -t nat -P OUTPUT ACCEPT 39 | 40 | # 41 | # reset the default policies in the mangle table. 42 | # 43 | $IPTABLES -t mangle -P PREROUTING ACCEPT 44 | $IPTABLES -t mangle -P OUTPUT ACCEPT 45 | 46 | # 47 | # flush all the rules in the filter and nat tables. 48 | # 49 | $IPTABLES -F 50 | $IPTABLES -t nat -F 51 | $IPTABLES -t mangle -F 52 | # 53 | # erase all chains that's not default in filter and nat table. 54 | # 55 | $IPTABLES -X 56 | $IPTABLES -t nat -X 57 | $IPTABLES -t mangle -X 58 | 59 | 60 | -------------------------------------------------------------------------------- /portuguese/scripts/rc.test-iptables.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # rc.test-iptables - test script for iptables chains and tables. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | # 23 | # Filter table, all chains 24 | # 25 | iptables -t filter -A INPUT -p icmp --icmp-type echo-request \ 26 | -j LOG --log-prefix="filter INPUT:" 27 | iptables -t filter -A INPUT -p icmp --icmp-type echo-reply \ 28 | -j LOG --log-prefix="filter INPUT:" 29 | iptables -t filter -A OUTPUT -p icmp --icmp-type echo-request \ 30 | -j LOG --log-prefix="filter OUTPUT:" 31 | iptables -t filter -A OUTPUT -p icmp --icmp-type echo-reply \ 32 | -j LOG --log-prefix="filter OUTPUT:" 33 | iptables -t filter -A FORWARD -p icmp --icmp-type echo-request \ 34 | -j LOG --log-prefix="filter FORWARD:" 35 | iptables -t filter -A FORWARD -p icmp --icmp-type echo-reply \ 36 | -j LOG --log-prefix="filter FORWARD:" 37 | 38 | # 39 | # NAT table, all chains except OUTPUT which don't work. 40 | # 41 | iptables -t nat -A PREROUTING -p icmp --icmp-type echo-request \ 42 | -j LOG --log-prefix="nat PREROUTING:" 43 | iptables -t nat -A PREROUTING -p icmp --icmp-type echo-reply \ 44 | -j LOG --log-prefix="nat PREROUTING:" 45 | iptables -t nat -A POSTROUTING -p icmp --icmp-type echo-request \ 46 | -j LOG --log-prefix="nat POSTROUTING:" 47 | iptables -t nat -A POSTROUTING -p icmp --icmp-type echo-reply \ 48 | -j LOG --log-prefix="nat POSTROUTING:" 49 | iptables -t nat -A OUTPUT -p icmp --icmp-type echo-request \ 50 | -j LOG --log-prefix="nat OUTPUT:" 51 | iptables -t nat -A OUTPUT -p icmp --icmp-type echo-reply \ 52 | -j LOG --log-prefix="nat OUTPUT:" 53 | 54 | # 55 | # Mangle table, all chains 56 | # 57 | iptables -t mangle -A PREROUTING -p icmp --icmp-type echo-request \ 58 | -j LOG --log-prefix="mangle PREROUTING:" 59 | iptables -t mangle -A PREROUTING -p icmp --icmp-type echo-reply \ 60 | -j LOG --log-prefix="mangle PREROUTING:" 61 | iptables -t mangle -A OUTPUT -p icmp --icmp-type echo-request \ 62 | -j LOG --log-prefix="mangle OUTPUT:" 63 | iptables -t mangle -A OUTPUT -p icmp --icmp-type echo-reply \ 64 | -j LOG --log-prefix="mangle OUTPUT:" 65 | 66 | 67 | 68 | -------------------------------------------------------------------------------- /portuguese/scripts/retrieveip.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # ttl-inc.txt - short script to increase TTL of all packets on port 33434 - 33542 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # Originally written and provided by Jelle Kalf <jkalfATunoDOTnl>. All 8 | # greetings, thanks and feedback should be sent to him for this script. 9 | # 10 | # This program is free software; you can redistribute it and/or modify 11 | # it under the terms of the GNU General Public License as published by 12 | # the Free Software Foundation; version 2 of the License. 13 | # 14 | # This program is distributed in the hope that it will be useful, 15 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 16 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 17 | # GNU General Public License for more details. 18 | # 19 | # You should have received a copy of the GNU General Public License 20 | # along with this program or from the site that you downloaded it 21 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 22 | # Place, Suite 330, Boston, MA 02111-1307 USA 23 | # 24 | 25 | RetrieveIP() { 26 | nic="$1" 27 | TEMP="" 28 | 29 | if ! /sbin/ifconfig | grep $nic > /dev/null; then 30 | echo -e "\n\n interface $nic does not exist... Aborting!" 31 | exit 1; 32 | fi 33 | 34 | TEMP=`ifconfig $nic | awk '/inet addr/ { gsub(".*:", "", $2) ; print 35 | $2 }'` 36 | 37 | if [ "$TEMP" = '' ]; then 38 | echo "Aborting: Unable to determine the IP of $nic ... DHCP problem?" 39 | exit 1 40 | fi 41 | } 42 | 43 | RetrieveBC() { 44 | nic="$1" 45 | BROADCAST=`ifconfig $nic | awk '/inet addr/ { gsub(".*:", "", $3) ; print $3 }'` 46 | } 47 | -------------------------------------------------------------------------------- /portuguese/scripts/sid-owner.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # pid-owner.txt - Example rule on how the sid-owner match could be used. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | SID=`ps -eo sid,args |grep httpd |head -n 1 |cut -b 1-5` 23 | 24 | /usr/local/sbin/iptables -A OUTPUT -p TCP -m owner --sid-owner $SID -j ACCEPT 25 | 26 | 27 | -------------------------------------------------------------------------------- /portuguese/scripts/ttl-inc.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # ttl-inc.txt - short script to increase TTL of all packets on port 33434 - 33542 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | /usr/local/sbin/iptables -t mangle -A PREROUTING -p TCP --dport 33434:33542 -j \ 23 | TTL --ttl-inc 1 24 | -------------------------------------------------------------------------------- /scripts/iptsave-ruleset.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # iptsave-ruleset.txt - Example script used to create iptables-save data. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | INET_IFACE="eth0" 23 | INET_IP="195.233.192.1" 24 | 25 | LAN_IFACE="eth1" 26 | 27 | iptables -P INPUT DROP 28 | iptables -P OUTPUT DROP 29 | iptables -P FORWARD DROP 30 | 31 | 32 | iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT 33 | 34 | iptables -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT 35 | 36 | iptables -A FORWARD -i $INET_IFACE -m state --state ESTABLISHED,RELATED -j ACCEPT 37 | iptables -A FORWARD -i $LAN_IFACE -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT 38 | 39 | iptables -t nat -A POSTROUTING -o $INET_IFACE -j SNAT --to-source $INET_IP 40 | 41 | 42 | -------------------------------------------------------------------------------- /scripts/iptsave-saved.txt: -------------------------------------------------------------------------------- 1 | # Generated by iptables-save v1.2.5 on Tue Apr 23 21:33:34 2002 2 | *mangle 3 | :PREROUTING ACCEPT [0:0] 4 | :INPUT ACCEPT [104:14687] 5 | :FORWARD ACCEPT [0:0] 6 | :OUTPUT ACCEPT [0:0] 7 | :POSTROUTING ACCEPT [42:4676] 8 | COMMIT 9 | # Completed on Tue Apr 23 21:33:34 2002 10 | # Generated by iptables-save v1.2.5 on Tue Apr 23 21:33:34 2002 11 | *nat 12 | :PREROUTING ACCEPT [0:0] 13 | :POSTROUTING ACCEPT [0:0] 14 | :OUTPUT ACCEPT [0:0] 15 | COMMIT 16 | # Completed on Tue Apr 23 21:33:34 2002 17 | # Generated by iptables-save v1.2.5 on Tue Apr 23 21:33:34 2002 18 | *filter 19 | :INPUT ACCEPT [0:0] 20 | :FORWARD ACCEPT [0:0] 21 | :OUTPUT ACCEPT [0:0] 22 | COMMIT 23 | # Completed on Tue Apr 23 21:33:34 2002 24 | -------------------------------------------------------------------------------- /scripts/limit-match.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # limit-match.txt - Example rule on how the limit match could be used. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | iptables -A INPUT -p icmp --icmp-type echo-reply -m limit --limit \ 23 | 3/minute --limit-burst 5 -j DROP 24 | 25 | 26 | 27 | -------------------------------------------------------------------------------- /scripts/pid-owner.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # pid-owner.txt - Example rule on how the pid-owner match could be used. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | PID=`ps aux |grep inetd |head -n 1 |cut -b 10-14` 23 | 24 | /usr/local/sbin/iptables -A OUTPUT -p TCP -m owner --pid-owner $PID -j ACCEPT 25 | 26 | 27 | -------------------------------------------------------------------------------- /scripts/rc.flush-iptables.txt: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | # 3 | # rc.flush-iptables - Resets iptables to default values. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | 21 | # 22 | # Configurations 23 | # 24 | IPTABLES="/usr/sbin/iptables" 25 | 26 | # 27 | # reset the default policies in the filter table. 28 | # 29 | $IPTABLES -P INPUT ACCEPT 30 | $IPTABLES -P FORWARD ACCEPT 31 | $IPTABLES -P OUTPUT ACCEPT 32 | 33 | # 34 | # reset the default policies in the nat table. 35 | # 36 | $IPTABLES -t nat -P PREROUTING ACCEPT 37 | $IPTABLES -t nat -P POSTROUTING ACCEPT 38 | $IPTABLES -t nat -P OUTPUT ACCEPT 39 | 40 | # 41 | # reset the default policies in the mangle table. 42 | # 43 | $IPTABLES -t mangle -P PREROUTING ACCEPT 44 | $IPTABLES -t mangle -P POSTROUTING ACCEPT 45 | $IPTABLES -t mangle -P INPUT ACCEPT 46 | $IPTABLES -t mangle -P OUTPUT ACCEPT 47 | $IPTABLES -t mangle -P FORWARD ACCEPT 48 | 49 | # 50 | # flush all the rules in the filter and nat tables. 51 | # 52 | $IPTABLES -F 53 | $IPTABLES -t nat -F 54 | $IPTABLES -t mangle -F 55 | # 56 | # erase all chains that's not default in filter and nat table. 57 | # 58 | $IPTABLES -X 59 | $IPTABLES -t nat -X 60 | $IPTABLES -t mangle -X 61 | 62 | 63 | -------------------------------------------------------------------------------- /scripts/retrieveip.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # retreiveip.txt - Script containing two functions to automatically grab IP 4 | # dynamically 5 | # 6 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 7 | # 8 | # Originally written and provided by Jelle Kalf <jkalfATunoDOTnl>. All 9 | # greetings, thanks and feedback should be sent to him for this script. 10 | # 11 | # This program is free software; you can redistribute it and/or modify 12 | # it under the terms of the GNU General Public License as published by 13 | # the Free Software Foundation; version 2 of the License. 14 | # 15 | # This program is distributed in the hope that it will be useful, 16 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 17 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 18 | # GNU General Public License for more details. 19 | # 20 | # You should have received a copy of the GNU General Public License 21 | # along with this program or from the site that you downloaded it 22 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 23 | # Place, Suite 330, Boston, MA 02111-1307 USA 24 | # 25 | 26 | RetrieveIP() { 27 | nic="$1" 28 | TEMP="" 29 | 30 | if ! /sbin/ifconfig | grep $nic > /dev/null; then 31 | echo -e "\n\n interface $nic does not exist... Aborting!" 32 | exit 1; 33 | fi 34 | 35 | TEMP=`ifconfig $nic | awk '/inet addr/ { gsub(".*:", "", $2) ; print 36 | $2 }'` 37 | 38 | if [ "$TEMP" = '' ]; then 39 | echo "Aborting: Unable to determine the IP of $nic ... DHCP problem?" 40 | exit 1 41 | fi 42 | } 43 | 44 | RetrieveBC() { 45 | nic="$1" 46 | BROADCAST=`ifconfig $nic | awk '/inet addr/ { gsub(".*:", "", $3) ; print $3 }'` 47 | } 48 | -------------------------------------------------------------------------------- /scripts/sid-owner.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # sid-owner.txt - Example rule on how the sid-owner match could be used. 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | SID=`ps -eo sid,args |grep httpd |head -n 1 |cut -b 1-5` 23 | 24 | /usr/local/sbin/iptables -A OUTPUT -p TCP -m owner --sid-owner $SID -j ACCEPT 25 | 26 | 27 | -------------------------------------------------------------------------------- /scripts/ttl-inc.txt: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # ttl-inc.txt - short script to increase TTL of all packets on port 33434 - 33542 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <bluefluxATkoffeinDOTnet> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | /usr/local/sbin/iptables -t mangle -A PREROUTING -p TCP --dport 33434:33542 -j \ 23 | TTL --ttl-inc 1 24 | -------------------------------------------------------------------------------- /spanish/ChangeLog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/ChangeLog -------------------------------------------------------------------------------- /spanish/TODO: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/TODO -------------------------------------------------------------------------------- /spanish/appendices/ICMP_types.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/appendices/ICMP_types.sgml -------------------------------------------------------------------------------- /spanish/appendices/acknowledgements.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/appendices/acknowledgements.sgml -------------------------------------------------------------------------------- /spanish/appendices/common_problems.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/appendices/common_problems.sgml -------------------------------------------------------------------------------- /spanish/appendices/detailed_explanations.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/appendices/detailed_explanations.sgml -------------------------------------------------------------------------------- /spanish/appendices/history.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/appendices/history.sgml -------------------------------------------------------------------------------- /spanish/appendices/other_resources.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/appendices/other_resources.sgml -------------------------------------------------------------------------------- /spanish/appendices/script_codebase.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/appendices/script_codebase.sgml -------------------------------------------------------------------------------- /spanish/bookinfo.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/bookinfo.sgml -------------------------------------------------------------------------------- /spanish/changes.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # 3 | # changes.sh - used for iptables-tutorial mirroring 4 | # 5 | # Copyright (C) 2001 Oscar Andreasson <blueflux@koffein.net> 6 | # 7 | # This program is free software; you can redistribute it and/or modify 8 | # it under the terms of the GNU General Public License as published by 9 | # the Free Software Foundation; version 2 of the License. 10 | # 11 | # This program is distributed in the hope that it will be useful, 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 | # GNU General Public License for more details. 15 | # 16 | # You should have received a copy of the GNU General Public License 17 | # along with this program or from the site that you downloaded it 18 | # from; if not, write to the Free Software Foundation, Inc., 59 Temple 19 | # Place, Suite 330, Boston, MA 02111-1307 USA 20 | # 21 | 22 | for file in ./*.html ; do 23 | cat ${file} | sed -e 's/http:\/\/iptables-tutorial.frozentux.net\/scripts\//scripts\//g' > ${file}2 24 | cat ${file}2 | sed -e 's/http:\/\/iptables-tutorial.frozentux.net\/other\//other\//g' > ${file} 25 | rm -f ${file}2 26 | done 27 | 28 | -------------------------------------------------------------------------------- /spanish/chapters/acknowledgements.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/acknowledgements.sgml -------------------------------------------------------------------------------- /spanish/chapters/common_problems.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/common_problems.sgml -------------------------------------------------------------------------------- /spanish/chapters/example_scripts.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/example_scripts.sgml -------------------------------------------------------------------------------- /spanish/chapters/firewall_explanation.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/firewall_explanation.sgml -------------------------------------------------------------------------------- /spanish/chapters/how_a_rule_is_built.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/how_a_rule_is_built.sgml -------------------------------------------------------------------------------- /spanish/chapters/introduction.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/introduction.sgml -------------------------------------------------------------------------------- /spanish/chapters/preparations.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/preparations.sgml -------------------------------------------------------------------------------- /spanish/chapters/rc_firewall.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/rc_firewall.sgml -------------------------------------------------------------------------------- /spanish/chapters/saveandrestore.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/saveandrestore.sgml -------------------------------------------------------------------------------- /spanish/chapters/statemachine.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/statemachine.sgml -------------------------------------------------------------------------------- /spanish/chapters/traversing_of_tables_and_chains.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/chapters/traversing_of_tables_and_chains.sgml -------------------------------------------------------------------------------- /spanish/images/caution.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/caution.gif -------------------------------------------------------------------------------- /spanish/images/convsize.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | for [$afile in 'ls']; then 4 | $tmpfile='basename $afile .gif'+2.gif 5 | 6 | convert -geometry 80% $afile $tmpfile 7 | rm -f $afile 8 | mv $tmpfile $afile 9 | done -------------------------------------------------------------------------------- /spanish/images/images.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/images.zip -------------------------------------------------------------------------------- /spanish/images/note.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/note.gif -------------------------------------------------------------------------------- /spanish/images/packet_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/packet_traverse.gif -------------------------------------------------------------------------------- /spanish/images/packet_traverse_FORWARD.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/packet_traverse_FORWARD.gif -------------------------------------------------------------------------------- /spanish/images/packet_traverse_INPUT.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/packet_traverse_INPUT.gif -------------------------------------------------------------------------------- /spanish/images/packet_traverse_OUTPUT.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/packet_traverse_OUTPUT.gif -------------------------------------------------------------------------------- /spanish/images/rc.DHCP.firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/rc.DHCP.firewall.gif -------------------------------------------------------------------------------- /spanish/images/rc.DMZ.firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/rc.DMZ.firewall.gif -------------------------------------------------------------------------------- /spanish/images/rc.UTIN.firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/rc.UTIN.firewall.gif -------------------------------------------------------------------------------- /spanish/images/rc.firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/rc.firewall.gif -------------------------------------------------------------------------------- /spanish/images/rc_DHCP_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/rc_DHCP_firewall.gif -------------------------------------------------------------------------------- /spanish/images/rc_DMZ_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/rc_DMZ_firewall.gif -------------------------------------------------------------------------------- /spanish/images/rc_UTIN_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/rc_UTIN_firewall.gif -------------------------------------------------------------------------------- /spanish/images/rc_firewall.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/rc_firewall.gif -------------------------------------------------------------------------------- /spanish/images/state-icmp-ping.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/state-icmp-ping.gif -------------------------------------------------------------------------------- /spanish/images/state-tcp-client-subconn.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/state-tcp-client-subconn.gif -------------------------------------------------------------------------------- /spanish/images/state-tcp-closing.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/state-tcp-closing.gif -------------------------------------------------------------------------------- /spanish/images/state-tcp-connecting.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/state-tcp-connecting.gif -------------------------------------------------------------------------------- /spanish/images/state-tcp-icmp-reply.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/state-tcp-icmp-reply.gif -------------------------------------------------------------------------------- /spanish/images/state-tcp-server-subconn.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/state-tcp-server-subconn.gif -------------------------------------------------------------------------------- /spanish/images/state-udp-connection.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/state-udp-connection.gif -------------------------------------------------------------------------------- /spanish/images/state-udp-icmp-reply.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/state-udp-icmp-reply.gif -------------------------------------------------------------------------------- /spanish/images/tables_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/tables_traverse.gif -------------------------------------------------------------------------------- /spanish/images/tablesnchains_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/tablesnchains_traverse.gif -------------------------------------------------------------------------------- /spanish/images/templates/Image13.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/Image13.psp -------------------------------------------------------------------------------- /spanish/images/templates/figurer.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/figurer.gif -------------------------------------------------------------------------------- /spanish/images/templates/packet_traverse.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/packet_traverse.psp -------------------------------------------------------------------------------- /spanish/images/templates/pilar.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/pilar.gif -------------------------------------------------------------------------------- /spanish/images/templates/rc.DHCP.firewall.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/rc.DHCP.firewall.psp -------------------------------------------------------------------------------- /spanish/images/templates/rc.UTIN.firewall.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/rc.UTIN.firewall.psp -------------------------------------------------------------------------------- /spanish/images/templates/rc.firewall.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/rc.firewall.psp -------------------------------------------------------------------------------- /spanish/images/templates/state-icmp-ping.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/state-icmp-ping.png -------------------------------------------------------------------------------- /spanish/images/templates/state-tcp-client-subconn.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/state-tcp-client-subconn.png -------------------------------------------------------------------------------- /spanish/images/templates/state-tcp-closing.kpr: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/state-tcp-closing.kpr -------------------------------------------------------------------------------- /spanish/images/templates/state-tcp-closing.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/state-tcp-closing.png -------------------------------------------------------------------------------- /spanish/images/templates/state-tcp-connecting.kpr: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/state-tcp-connecting.kpr -------------------------------------------------------------------------------- /spanish/images/templates/state-tcp-connecting.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/state-tcp-connecting.png -------------------------------------------------------------------------------- /spanish/images/templates/state-tcp-icmp-reply.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/state-tcp-icmp-reply.png -------------------------------------------------------------------------------- /spanish/images/templates/state-tcp-server-subconn.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/state-tcp-server-subconn.png -------------------------------------------------------------------------------- /spanish/images/templates/state-udp-connection.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/state-udp-connection.png -------------------------------------------------------------------------------- /spanish/images/templates/state-udp-icmp-reply.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/state-udp-icmp-reply.png -------------------------------------------------------------------------------- /spanish/images/templates/tablenchains_traverse.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/tablenchains_traverse.psp -------------------------------------------------------------------------------- /spanish/images/templates/tablenchains_traverse2.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/tablenchains_traverse2.psp -------------------------------------------------------------------------------- /spanish/images/templates/tables_traverse.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/tables_traverse.gif -------------------------------------------------------------------------------- /spanish/images/templates/tables_traverse.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/tables_traverse.psp -------------------------------------------------------------------------------- /spanish/images/templates/tables_traverse.xcf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/tables_traverse.xcf -------------------------------------------------------------------------------- /spanish/images/templates/tables_traverse2.psp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/templates/tables_traverse2.psp -------------------------------------------------------------------------------- /spanish/images/tip.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/tip.gif -------------------------------------------------------------------------------- /spanish/images/warning.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/images/warning.gif -------------------------------------------------------------------------------- /spanish/index.php: -------------------------------------------------------------------------------- 1 | 6 | 7 | 12 | 13 | Online: 14 | HTML | 15 | Chunky HTML 16 |
17 | Downloadable: 18 | PS | 19 | Chunky HTML tgz | 20 | HTML tgz | 21 | 22 | DocBook tgz 23 |
24 | Misc: 25 | ChangeLog | 26 | TODO | 27 | Mirrors 28 |

29 | 30 | 35 | -------------------------------------------------------------------------------- /spanish/iptables-tutorial.sgml: -------------------------------------------------------------------------------- 1 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | ]> 34 | 35 | 36 | 37 | &bookinfo; 38 | 39 | 40 | 41 | &introduction; 42 | 43 | &preparations; 44 | 45 | &traversingoftablesandchains; 46 | 47 | &statemachinesgml; 48 | 49 | &saveandrestoresgml; 50 | 51 | &howaruleisbuilt; 52 | 53 | &rcfirewallsgml; 54 | 55 | &examplescripts; 56 | 57 | &detailedexplanations; 58 | 59 | &commonproblems; 60 | 61 | &ICMPtypes; 62 | 63 | &otherresources; 64 | 65 | &acknowledgements; 66 | 67 | &history; 68 | 69 | &gfdles; 70 | 71 | &gfdl; 72 | 73 | &gples; 74 | 75 | &gpl; 76 | 77 | &scriptcodebase; 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | -------------------------------------------------------------------------------- /spanish/licensing/fdl-es.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/licensing/fdl-es.sgml -------------------------------------------------------------------------------- /spanish/licensing/gpl-es.sgml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/licensing/gpl-es.sgml -------------------------------------------------------------------------------- /spanish/logfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/logfile -------------------------------------------------------------------------------- /spanish/mirrors.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | Mirrors of the IPTables-tutorial 4 | 5 | 6 | Mirrors marked with a * where down the last time I checked, if they're still down 7 | the next time I check them, they go out of this file. 8 |

9 | Complete mirrors: 10 |
11 | - http://iptables-tutorial.frozentux.net 13 |
Maintainer: Jacco van Koll, 14 | Oscar Andreasson 15 |

16 | - http://people.unix-fu.org/andreasson/ 18 |
Maintainer: Oscar Andreasson 19 |

20 | - http://www.linux-sxs.org/iptables/ 22 |
Maintainer: Lonni 23 |

24 | - http://www.linuxsecurity.com/resource_files/firewalls/IPTables-Tutorial 26 |
Maintainer: Dave Wreski 27 |

28 | - http://www.linuxvoodoo.com/howto/iptables/index.html 29 |
Maintainer: Will Cline(?) 30 |

31 | - http://www.iptables.com.br/iptablesTutorial 32 |
Maintainer: Rodrigo Rubira Branco 33 |

34 | - http://www.jollycom.ca/iptables-tutorial/ 35 |
Maintainer: Neil Jolly 36 |

37 | - http://www.linuxguruz.org/mirrors/people.unix-fu.org/htdocs/ 39 |
Maintainer: XXXX 40 |

41 | - http://www.unixcircle.com/iptables 43 |
Maintainer: Thang 44 |

45 | 46 | 47 | 48 | -------------------------------------------------------------------------------- /spanish/other/ip-param.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/other/ip-param.txt -------------------------------------------------------------------------------- /spanish/other/ip-sysctl.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/other/ip-sysctl.txt -------------------------------------------------------------------------------- /spanish/other/ip_dynaddr.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/other/ip_dynaddr.txt -------------------------------------------------------------------------------- /spanish/other/ip_dynaddr_rst2.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/other/ip_dynaddr_rst2.txt -------------------------------------------------------------------------------- /spanish/scripts/iptsave-ruleset.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/iptsave-ruleset.txt -------------------------------------------------------------------------------- /spanish/scripts/iptsave-saved.txt: -------------------------------------------------------------------------------- 1 | # Generated by iptables-save v1.2.5 on Tue Apr 23 21:33:34 2002 2 | # [Generado por iptables-save v1.2.5 el Martes 23 Abr 21:33:34 2002] 3 | *mangle 4 | :PREROUTING ACCEPT [0:0] 5 | :INPUT ACCEPT [104:14687] 6 | :FORWARD ACCEPT [0:0] 7 | :OUTPUT ACCEPT [0:0] 8 | :POSTROUTING ACCEPT [42:4676] 9 | COMMIT 10 | # Completed on Tue Apr 23 21:33:34 2002 11 | # [Completado el Mar 23 Abr 21:33:34 2002] 12 | # Generated by iptables-save v1.2.5 on Tue Apr 23 21:33:34 2002 13 | # [Generado por iptables-save v1.2.5 el Martes 23 Abr 21:33:34 2002] 14 | *nat 15 | :PREROUTING ACCEPT [0:0] 16 | :POSTROUTING ACCEPT [0:0] 17 | :OUTPUT ACCEPT [0:0] 18 | COMMIT 19 | # Completed on Tue Apr 23 21:33:34 2002 20 | # [Completado el Mar 23 Abr 21:33:34 2002] 21 | # Generated by iptables-save v1.2.5 on Tue Apr 23 21:33:34 2002 22 | # [Generado por iptables-save v1.2.5 el Martes 23 Abr 21:33:34 2002] 23 | *filter 24 | :INPUT ACCEPT [0:0] 25 | :FORWARD ACCEPT [0:0] 26 | :OUTPUT ACCEPT [0:0] 27 | COMMIT 28 | # Completed on Tue Apr 23 21:33:34 2002 29 | # [Completado el Mar 23 Abr 21:33:34 2002] -------------------------------------------------------------------------------- /spanish/scripts/limit-match.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/limit-match.txt -------------------------------------------------------------------------------- /spanish/scripts/pid-owner.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/pid-owner.txt -------------------------------------------------------------------------------- /spanish/scripts/rc.DHCP.firewall.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/rc.DHCP.firewall.txt -------------------------------------------------------------------------------- /spanish/scripts/rc.DMZ.firewall.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/rc.DMZ.firewall.txt -------------------------------------------------------------------------------- /spanish/scripts/rc.UTIN.firewall.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/rc.UTIN.firewall.txt -------------------------------------------------------------------------------- /spanish/scripts/rc.firewall.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/rc.firewall.txt -------------------------------------------------------------------------------- /spanish/scripts/rc.flush-iptables.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/rc.flush-iptables.txt -------------------------------------------------------------------------------- /spanish/scripts/rc.test-iptables.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/rc.test-iptables.txt -------------------------------------------------------------------------------- /spanish/scripts/retrieveip.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/retrieveip.txt -------------------------------------------------------------------------------- /spanish/scripts/sid-owner.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/sid-owner.txt -------------------------------------------------------------------------------- /spanish/scripts/ttl-inc.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/frznlogic/iptables-tutorial/21324341c8620554369ed0096541aebb1164813f/spanish/scripts/ttl-inc.txt -------------------------------------------------------------------------------- /styles/html.dsl: -------------------------------------------------------------------------------- 1 | 3 | ]> 4 | 5 | 6 | 7 | 8 | 9 | ;; $Id: html.dsl,v 1.3 2006-10-18 13:19:51 blueflux Exp $ 10 | ;; 11 | ;; This file is part of the Modular DocBook Stylesheet distribution. 12 | ;; See ../README or http://www.berkshire.net/~norm/dsssl/ 13 | ;; 14 | ;; Example of a customization layer on top of the modular docbook style 15 | ;; sheet. Definitions inserted in this file take precedence over 16 | ;; definitions in the 'use'd stylesheet(s). 17 | 18 | (define %html-ext% 19 | ".html") 20 | 21 | ;;(define %root-filename% 22 | ;; #t) 23 | 24 | (define %title-font-family% 25 | "Arial") 26 | (define %body-font-family% 27 | "Arial") 28 | (define %mono-font-family% 29 | "Arial") 30 | (define %admon-font-family% 31 | "Arial") 32 | (define %command-font-family% 33 | "Courier New") 34 | 35 | (define %stylesheet% "table.css") 36 | 37 | (define %admon-graphics% 38 | #t) 39 | (define %admon-graphics-path% 40 | "images/") 41 | 42 | (element command 43 | (make sequence 44 | font-family-name: %mono-font-family% 45 | font-weight: 'bold 46 | )) 47 | 48 | (element literallayout 49 | (make sequence 50 | font-family-name: %mono-font-family% 51 | )) 52 | 53 | (element systemitem 54 | (make sequence 55 | font-family-name: %mono-font-family% 56 | font-weight: 'normal 57 | font-posture: 'italic 58 | )) 59 | 60 | (element computeroutput 61 | (make sequence 62 | font-family-name: %mono-font-family% 63 | font-weight: 'bold 64 | font-posture: 'italic 65 | )) 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | -------------------------------------------------------------------------------- /styles/print.dsl: -------------------------------------------------------------------------------- 1 | 3 | ]> 4 | 5 | 6 | 7 | 8 | 9 | ;; $Id: print.dsl,v 1.2 2006-11-07 08:53:59 blueflux Exp $ 10 | ;; 11 | ;; This file is part of the Modular DocBook Stylesheet distribution. 12 | ;; See ../README or http://www.berkshire.net/~norm/dsssl/ 13 | ;; 14 | ;; Example of a customization layer on top of the modular docbook style 15 | ;; sheet. Definitions inserted in this file take precedence over 16 | ;; definitions in the 'use'd stylesheet(s). 17 | 18 | (define %title-font-family% 19 | "Arial") 20 | (define %body-font-family% 21 | "Arial") 22 | (define %mono-font-family% 23 | "Arial") 24 | (define %admon-font-family% 25 | "Arial") 26 | (define %command-font-family% 27 | "Courier New") 28 | 29 | (define %admon-graphics% 30 | #t) 31 | (define %admon-graphics-path% 32 | "images/") 33 | 34 | (define %page-width% 35 | 6in) 36 | (define %page-height% 37 | 9in) 38 | 39 | (define (first-page-inner-header gi) (empty-sosofo)) 40 | (define (first-page-center-header gi) (empty-sosofo)) 41 | (define (first-page-outer-header gi) (empty-sosofo)) 42 | (define (page-inner-header gi) (empty-sosofo)) 43 | (define (page-center-header gi) 44 | (cond 45 | ((equal? (normalize gi) (normalize "dedication")) (empty-sosofo)) 46 | ((equal? (normalize gi) (normalize "lot")) (empty-sosofo)) 47 | ((equal? (normalize gi) (normalize "part")) (empty-sosofo)) 48 | ((equal? (normalize gi) (normalize "toc")) (empty-sosofo)) 49 | (else ($title-header-footer$)))) 50 | (define (page-outer-header gi) (empty-sosofo)) 51 | 52 | (define (page-inner-footer gi) (empty-sosofo)) 53 | (define (page-center-footer gi) ($page-number-header-footer$)) 54 | (define (page-outer-footer gi) (empty-sosofo)) 55 | (define (first-page-inner-footer gi) (empty-sosofo)) 56 | (define (first-page-center-footer gi) ($page-number-header-footer$)) 57 | (define (first-page-outer-footer gi) (empty-sosofo)) 58 | 59 | (define %epigraph-start-indent% 60 | (* %text-width% 0.30)) 61 | (define %body-start-indent% 62 | 0pi) 63 | (define %left-margin% 64 | 0.8in) 65 | (define %right-margin% 66 | 0.8in) 67 | 68 | (element command 69 | (make sequence 70 | font-family-name: %mono-font-family% 71 | font-weight: 'bold 72 | )) 73 | 74 | (element literallayout 75 | (make sequence 76 | font-family-name: %mono-font-family% 77 | )) 78 | 79 | (element systemitem 80 | (make sequence 81 | font-family-name: %mono-font-family% 82 | font-weight: 'normal 83 | font-posture: 'italic 84 | )) 85 | 86 | (element computeroutput 87 | (make sequence 88 | font-family-name: %mono-font-family% 89 | font-weight: 'bold 90 | font-posture: 'italic 91 | )) 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | --------------------------------------------------------------------------------