来源：本文转自“运维研习社” The Netfilter framework was created by Rusty Russell in 1998. It is a subsystem of the Linux kernel, merged into the Linux kernel in March 2000. Netfilter adopts a modular design, providing a well-structured underlying framework for extending various network services. You can register callbacks at various points in the packet traversal process within … Read more
Source: freebuf Part01 Vulnerability Overview A critical vulnerability has been discovered in the ipset subsystem of the Linux kernel netfilter, allowing local attackers to escalate their privileges to root level. This vulnerability exists in the bitmap:ip implementation of the ipset framework, stemming from insufficient range validation when processing CIDR format IP address ranges. Due to … Read more
What is Firewalld? It is a front-end management tool for the Linux kernel’s Netfilter/iptables system. It provides a more user-friendly interface for managing firewall rules, simplifying the complexity of directly using iptables. Firewalld supports dynamic updates, allowing modifications to rules without restarting the service, and introduces the concepts of “zones” and “services” for quickly switching … Read more
Completed Content I will create a simple firewall demo to help you familiarize yourself with network kernel programming. This demo will be implemented based on the Linux Netfilter framework. Basic Framework Basic Concepts Netfilter Framework Netfilter is a framework in the Linux kernel used for filtering, modifying, and redirecting network packets. It provides multiple hook … Read more
Shake Network Technology NewsClick the right to follow for the latest technology news!Part01 Vulnerability Overview A high-risk vulnerability has been discovered in the ipset subsystem of the Linux kernel netfilter, allowing local attackers to escalate privileges to root level. This vulnerability exists in the bitmap:ip implementation of the ipset framework, stemming from insufficient range validation … Read more
Part01 Vulnerability Overview A critical vulnerability has been discovered in the ipset subsystem of the Linux kernel’s netfilter, allowing local attackers to escalate their privileges to root level. This vulnerability exists in the bitmap:ip implementation of the ipset framework, stemming from insufficient range validation when processing CIDR format IP address ranges. Due to the lack … Read more
Click the blue text above to follow me! OverviewTechnically speaking, iptables is not a firewall; the real firewall is netfilter, which runs in the system kernel. iptables is merely a representative of netfilter, primarily functioning to interact with users, obtaining their requests and converting them into information that netfilter can accept.iptables mainly operates at the … Read more
“Last night, I dreamt of falling flowers by a quiet pond, how pitiful that spring is halfway gone and I haven’t returned home“ Linux kernel Traffic Control (TC) refers to the queuing and scheduling mechanism for receiving and sending data packets by network devices. It can implement basic functions such as Shaping, Scheduling, Policing ingress, … Read more