bits | andy smith's blog
random stuff from the mind of a twenty-something professional geek

Posts Tagged ‘mark’

IPTables: Fun with MARK

01.27.2010 · Posted in IPTables/Netfilter, Security

One thing that’s always bugged me about IPTables is the lack of a way to use groups when writing rules, which can complicate things if you’ve got a potentially large rulebase. One way round this is to use something like fwbuilder, which gives you a graphical interface not unlike Checkpoint‘s SmartDashboard GUI for their Firewall-1 ...