• Thomas@lemmy.douwes.co.uk
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      edit-2
      1 year ago

      Who needs all this crazy firewall stuff when I have my

      iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
      iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
      iptables -A INPUT -i ppp0 -j DROP
      

      And for IPv6 you don’t need a firewall, just use slaac and hope no one finds the address /s