5 votes
Accepted

How to set iptables to block incoming requests to the server but still have internet connectivity

The added iptables rules prevent the system to access itself for its own services. If the DNS server is running on the system and queried using the host's main address or 127.0.0.1 then it can't be ...
A.B's user avatar
  • 12.5k
2 votes
Accepted

nftables rules can't ping to other server

Reasons it doesn't work Reason 1: IPv6 NDP is dropped The current ruleset prevents IPv6 to work properly on Ethernet, because it drops ICMPv6 traffic related to NDP which is the equivalent of ARP for ...
A.B's user avatar
  • 12.5k
2 votes

network unreachable for gcloud compute engine instance

As @john-hanley pointed out my home ISP doesn't support ipv6. I never even thought this would be an issue, but on researching australian ISPs most still don't support v6.
Brett Sutton's user avatar
1 vote
Accepted

Bypass nftables drop rule

Nitpicking: despite virbr0 being a bridge interface, this is about routing, not about bridging. The firewall happens on the routing side of the bridge: the bridge interface itself, not on the bridge ...
A.B's user avatar
  • 12.5k
1 vote

AWS Network Firewall + Windows EC2 Instance - google.com is not blocked in browser but is blocked in the command line

It is more likely use of Encrypted Client Hello (ECH, formerly ESNI) with Server Name Indication (SNI) evasion. The AWS Network Firewall only looks at the client-settable TLS SNI (comparable to the ...
new23d's user avatar
  • 21
1 vote

Where does UFW (uncomplicated firewall) save command-line rules to?

On Ubuntu 16 and up user firewall rules are stored in /etc/ufw/user.rules and /etc/ufw/user6.rules. Overall all UFW rules and configs located in /etc/ufw
Aleksei Semidotskii's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible