197 reputation
10
bio website blog.oxplot.com
location Sydney, Australia
age
visits member for 4 years
seen Sep 10 at 17:05

Aug
10
revised Drop packets after NAT in iptables
Added more details.
Aug
10
comment Drop packets after NAT in iptables
I see. I'd simplified my question. I'm actually trying to rate limit a specific IP (using hashlimit), so not all packets are dropped.
Aug
10
comment Drop packets after NAT in iptables
I've tried adding a rule to FORWARD chain in filter table (ie -I FORWARD 1 -d 192.0.0.0/24 -j DROP). Without -d, I achieve filtering, but as I understand it, both directions are filtered. I only want packets destined for the NAT clients to be filtered.
Aug
10
asked Drop packets after NAT in iptables
Aug
2
awarded  Popular Question
Jul
2
awarded  Curious
Oct
10
awarded  Popular Question
May
10
awarded  Popular Question
Dec
4
awarded  Popular Question
Feb
27
comment HTTPS only website
Awesome. Turns out I can do that! Thanks.
Feb
27
accepted HTTPS only website
Feb
27
awarded  Commentator
Feb
27
comment HTTPS only website
@YanickGirouard The port redirection won't work because the browser will send plain HTTP request (again, unencrypted) to port 443 instead of 80. Depending on which web server (mine is nginx) you are using, it will complain about a bad request and won't serve anything.
Feb
27
comment HTTPS only website
Yep, this is the ideal solution. Having the API and the WWW site on separate machines solves this problem. But due to lack of adequate resources, I have to put both on one server.
Feb
26
asked HTTPS only website
Nov
15
comment Force block device (NBD) to bypass the buffer cache
What I meant by "my program is not the user of the block device, a file system is" was that no part of my program deals with the block device. My code sits behind the block device as the backend. It's basically a Network Block Device which connects to an NBD server I've written. By bypassing the buffer cache, I was hoping to avoid some deadlocking issues with NBD setups.
Nov
14
awarded  Supporter
Sep
20
asked Force block device (NBD) to bypass the buffer cache
Oct
24
asked Mount two btrfs subvolumes simultaneously
Oct
11
comment Backup/Clone a btrfs partition
Please see the update to my question.