Suricata Schaubild - Versionsgeschichte

Thomas.will: /* Firewall */

2022-12-13T10:39:31Z

Firewall

2022-09-27T15:03:21Z

Firewall

2022-09-27T15:01:44Z

Änderungen

2022-09-27T15:01:08Z

2022-09-27T14:56:53Z

Ohne IDS/IPS

2022-09-27T14:56:40Z

2022-09-27T14:52:07Z

2022-09-27T14:51:43Z

2022-09-20T16:09:10Z

Die Seite wurde neu angelegt: „;suricata *WANDEV=enp0s3 *LANDEV=enp0s8 {{#drawio:ids}}“

Neue Seite

;suricata
*WANDEV=enp0s3
*LANDEV=enp0s8
{{#drawio:ids}}

@@ Zeile 8: / Zeile 8: @@
 ;ip route add 10.0.101.0/24 via 172.31.31.2
 ;iptables -A FORWARD -s 172.31.31.2/24 -i $DMZDEV -o $WANDEV -m state --state NEW -j ACCEPT
-;iptables -tnat POSTROUTING -s 172.31.31.2/24 -o $WANDEV -j MASQUERADE
+;iptables -t nat POSTROUTING -s 172.31.31.2/24 -o $WANDEV -j MASQUERADE
 ==IDS/IPS==
 ;enp0s3 172.31.31.2/24

← Nächstältere Version		Version vom 27. September 2022, 15:03 Uhr
Zeile 9:		Zeile 9:
	;iptables -A FORWARD -s 172.31.31.2/24 -i $DMZDEV -o $WANDEV -m state --state NEW -j ACCEPT		;iptables -A FORWARD -s 172.31.31.2/24 -i $DMZDEV -o $WANDEV -m state --state NEW -j ACCEPT
	;iptables -tnat POSTROUTING -s 172.31.31.2/24 -o $WANDEV -j MASQUERADE		;iptables -tnat POSTROUTING -s 172.31.31.2/24 -o $WANDEV -j MASQUERADE
		+	==IDS/IPS==
		+	;enp0s3 172.31.31.2/24
		+	;enp0s8 10.0.101.1/24
		+	;sysctl -w net.ipv4.ip_forward=1
		+	;ip route add default via 172.31.31.1

@@ Zeile 5: / Zeile 5: @@
 =Änderungen=
 ==Firewall==
-;enp0s8
+;enp0s8 172.31.31.1/24
 ;ip route add 10.0.101.0/24 via 172.31.31.2
 ;iptables -A FORWARD -s 172.31.31.2/24 -i $DMZDEV -o $WANDEV -m state --state NEW -j ACCEPT
 ;iptables -tnat POSTROUTING -s 172.31.31.2/24 -o $WANDEV -j MASQUERADE

← Nächstältere Version		Version vom 27. September 2022, 15:01 Uhr
Zeile 3:		Zeile 3:
	=Mit IDS/IPS=		=Mit IDS/IPS=
	{{#drawio:ids-1}}		{{#drawio:ids-1}}
		+	=Änderungen=
		+	==Firewall==
		+	;enp0s8
		+	172.31.31.1/24
		+	;ip route add 10.0.101.0/24 via 172.31.31.2
		+	;iptables -A FORWARD -s 172.31.31.2/24 -i $DMZDEV -o $WANDEV -m state --state NEW -j ACCEPT
		+	;iptables -tnat POSTROUTING -s 172.31.31.2/24 -o $WANDEV -j MASQUERADE

@@ Zeile 1: / Zeile 1: @@
 =Ohne IDS/IPS=
 {{#drawio:ids}}
-=Ohne IDS/IPS=
+=Mit IDS/IPS=
 {{#drawio:ids-1}}