dvandok

# compare established connections between netstat and conntrack

# first argument is interface name, assume eth0 if not given

if=eth0

if [ ! -z $1 ] ; then
    if=$1
fi

dvandok

# iptables best current practices

# allow various icmp types: echo-request, echo-reply, destination-unreachable, time-exceeded,
# parameter-problem, redirect

{% for type in ("echo-request", "echo-reply", "destination-unreachable", "time-exceeded", "parameter-problem", "redirect") %}
icmp-{{ type }}:
  iptables.insert:
    - table: filter
    - chain: INPUT

dvandok

Keybase proof

I hereby claim:

• I am dvandok on github.
• I am dennisvd (https://keybase.io/dennisvd) on keybase.
• I have a public key whose fingerprint is 5869 B8BB 7794 13AE 2BBC 11E3 DFFA D819 7617 EF19

To claim this, I am signing this object: