From 6437f94f709cce0feae1c028ccaaad3732b5cfe7 Mon Sep 17 00:00:00 2001 From: Samson-W Date: Sun, 21 Jul 2019 03:15:21 +0800 Subject: [PATCH] Update README with relate nftables. --- README.md | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index e2c5a5f..f7ad0eb 100644 --- a/README.md +++ b/README.md @@ -155,8 +155,10 @@ This example only allows 192.168.1.[1-255] 192.168.5.[1-255] to access this syst # sed -i "/^root/a\test ALL=(ALL:ALL) ALL" /etc/sudoers ``` -4) Set basic iptables rules +4) Set basic firewall rules Set the corresponding firewall rules according to the applications used. HardenedLinux community for Debian GNU/Linux basic firewall rules: + +### Iptabels format rules: [etc.iptables.rules.v4.sh](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/configurations/etc.iptables.rules.v4.sh) to do the following: ``` @@ -168,6 +170,15 @@ $ sudo -s # ip6tables-save > /etc/iptables/rules.v6 ``` +### nft format rules: +[nftables.conf](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/configurations/etc.nftables.conf) +to do the following: +``` +$ INTERFACENAME="your network interfacename(Example eth0)" +$ sed -i 's/^define int_if = ens33/define int_if = eth0/g' etc.nftables.conf +$ sudo nft -f ./etc.nftables.conf +``` + 5) Use the passwd command to change the passwords of all users, and change the password to a secure and reliable password entry with the same password complexity set by the pam_cracklib module. ## Special Note @@ -218,6 +229,8 @@ This document is a description of the additions to the sections not included in [How to config grub2 password protection](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/configurations/manual-operation-docs/how_to_config_grub2_password_protection.mkd) [How to persistent iptables rules with debian 9](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/configurations/manual-operation-docs/how_to_persistent_iptables_rules_with_debian_9.mkd) [How to deploy audisp-remote for auditd log](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/configurations/manual-operation-docs/how_to_deploy_audisp_remote_for_audit_log.mkd) +[how to migrating from iptables to nftables in debian10](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/configurations/manual-operation-docs/how_to_migrating_from_iptables_to_nftables_in_debian10.md) +[How to persistent nft rules with debian 10](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/configurations/manual-operation-docs/how_to_persistent_nft_rules_with_debian_10.mkd) ### Use case docs [Nodejs + redis + mysql demo](https://github.com/hardenedlinux/harbian-audit/blob/master/docs/use-cases/nodejs-redis-mysql-usecase/README.md)