Networking section

2008-10-15T12:38:04Z

78.46.86.242: /* Routes under Debian */

comment2, <a href="http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638110">kragen auto
</a>, [url="http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638110"]kragen auto
[/url], http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638110 kragen auto
, fxzw, <a href="http://en.netlog.com/dgwljdzvoedh61/blog/blogid=2636364">jordan capri youtube
</a>, [url="http://en.netlog.com/dgwljdzvoedh61/blog/blogid=2636364"]jordan capri youtube
[/url], http://en.netlog.com/dgwljdzvoedh61/blog/blogid=2636364 jordan capri youtube
, 68918, <a href="http://en.netlog.com/ugdghmftabu25/blog/blogid=2633708">bang password please wife
</a>, [url="http://en.netlog.com/ugdghmftabu25/blog/blogid=2633708"]bang password please wife
[/url], http://en.netlog.com/ugdghmftabu25/blog/blogid=2633708 bang password please wife
, 54109, <a href="http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638304">roys auto and eureka
</a>, [url="http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638304"]roys auto and eureka
[/url], http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638304 roys auto and eureka
, >:-(, <a href="http://en.netlog.com/stwtfcnpla79/blog/blogid=2639247">trish status
</a>, [url="http://en.netlog.com/stwtfcnpla79/blog/blogid=2639247"]trish status
[/url], http://en.netlog.com/stwtfcnpla79/blog/blogid=2639247 trish status
, dex, <a href="http://en.netlog.com/stwtfcnpla79/blog/blogid=2639384">trish stratus in the bath
</a>, [url="http://en.netlog.com/stwtfcnpla79/blog/blogid=2639384"]trish stratus in the bath
[/url], http://en.netlog.com/stwtfcnpla79/blog/blogid=2639384 trish stratus in the bath
, hjbjj, <a href="http://en.netlog.com/dkbxnbzhd71/blog/blogid=2635479">twins french kissing
</a>, [url="http://en.netlog.com/dkbxnbzhd71/blog/blogid=2635479"]twins french kissing
[/url], http://en.netlog.com/dkbxnbzhd71/blog/blogid=2635479 twins french kissing
, 571, <a href="http://en.netlog.com/stwtfcnpla79/blog/blogid=2639192">trish stratus topless
</a>, [url="http://en.netlog.com/stwtfcnpla79/blog/blogid=2639192"]trish stratus topless
[/url], http://en.netlog.com/stwtfcnpla79/blog/blogid=2639192 trish stratus topless
, eubxau, <a href="http://en.netlog.com/txgjhwumlztq63/blog/blogid=2637010">weather from the bbc
</a>, [url="http://en.netlog.com/txgjhwumlztq63/blog/blogid=2637010"]weather from the bbc
[/url], http://en.netlog.com/txgjhwumlztq63/blog/blogid=2637010 weather from the bbc
, xbxmn, <a href="http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638458">pmi to loan ratio
</a>, [url="http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638458"]pmi to loan ratio
[/url], http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638458 pmi to loan ratio
, 9744, <a href="http://en.netlog.com/xlopdlexvzpnj68/blog/blogid=2637357">facebook at school
</a>, [url="http://en.netlog.com/xlopdlexvzpnj68/blog/blogid=2637357"]facebook at school
[/url], http://en.netlog.com/xlopdlexvzpnj68/blog/blogid=2637357 facebook at school
, >:-], <a href="http://en.netlog.com/kzshxmrnhox24/blog/blogid=2635929">dave ramesy
</a>, [url="http://en.netlog.com/kzshxmrnhox24/blog/blogid=2635929"]dave ramesy
[/url], http://en.netlog.com/kzshxmrnhox24/blog/blogid=2635929 dave ramesy
, 627, <a href="http://en.netlog.com/dasmxvwjpn89/blog/blogid=2637860">download google map
</a>, [url="http://en.netlog.com/dasmxvwjpn89/blog/blogid=2637860"]download google map
[/url], http://en.netlog.com/dasmxvwjpn89/blog/blogid=2637860 download google map
, =OOO, <a href="http://en.netlog.com/oalpssfud93/blog/blogid=2633919">bald little beavers
</a>, [url="http://en.netlog.com/oalpssfud93/blog/blogid=2633919"]bald little beavers
[/url], http://en.netlog.com/oalpssfud93/blog/blogid=2633919 bald little beavers
, ern, <a href="http://en.netlog.com/wlhewbsad2/blog/blogid=2637962">pc game walk through
</a>, [url="http://en.netlog.com/wlhewbsad2/blog/blogid=2637962"]pc game walk through
[/url], http://en.netlog.com/wlhewbsad2/blog/blogid=2637962 pc game walk through
, 8-DDD, <a href="http://en.netlog.com/dasmxvwjpn89/blog/blogid=2637887">google map canada
</a>, [url="http://en.netlog.com/dasmxvwjpn89/blog/blogid=2637887"]google map canada
[/url], http://en.netlog.com/dasmxvwjpn89/blog/blogid=2637887 google map canada
, %-O, <a href="http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638485">buy auto paint palmer alaska
</a>, [url="http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638485"]buy auto paint palmer alaska
[/url], http://en.netlog.com/vlaslwmvybsluw43/blog/blogid=2638485 buy auto paint palmer alaska
, :-), <a href="http://en.netlog.com/tknvzdhdl97/blog/blogid=2639458">karaoke machine
</a>, [url="http://en.netlog.com/tknvzdhdl97/blog/blogid=2639458"]karaoke machine
[/url], http://en.netlog.com/tknvzdhdl97/blog/blogid=2639458 karaoke machine
, srda, <a href="http://en.netlog.com/oalpssfud93/blog/blogid=2633873">beaver image
</a>, [url="http://en.netlog.com/oalpssfud93/blog/blogid=2633873"]beaver image
[/url], http://en.netlog.com/oalpssfud93/blog/blogid=2633873 beaver image
, lhbfd, <a href="http://en.netlog.com/ghwsxnvs81/blog/blogid=2635805">accd
</a>, [url="http://en.netlog.com/ghwsxnvs81/blog/blogid=2635805"]accd
[/url], http://en.netlog.com/ghwsxnvs81/blog/blogid=2635805 accd
, :OO, <a href="http://en.netlog.com/dasmxvwjpn89/blog/blogid=2638027">googgle maps
</a>, [url="http://en.netlog.com/dasmxvwjpn89/blog/blogid=2638027"]googgle maps
[/url], http://en.netlog.com/dasmxvwjpn89/blog/blogid=2638027 googgle maps
, 373038, <a href="http://en.netlog.com/dkaxgskzwaypry20/blog/blogid=2634755">8 in polycarbonate tube
</a>, [url="http://en.netlog.com/dkaxgskzwaypry20/blog/blogid=2634755"]8 in polycarbonate tube
[/url], http://en.netlog.com/dkaxgskzwaypry20/blog/blogid=2634755 8 in polycarbonate tube
, >:-OO, <a href="http://en.netlog.com/fedgkkoh87/blog/blogid=2634411">bbc weather monthly forcast
</a>, [url="http://en.netlog.com/fedgkkoh87/blog/blogid=2634411"]bbc weather monthly forcast
[/url], http://en.netlog.com/fedgkkoh87/blog/blogid=2634411 bbc weather monthly forcast
, cvei, <a href="http://en.netlog.com/wlhewbsad2/blog/blogid=2638116">top video games
</a>, [url="http://en.netlog.com/wlhewbsad2/blog/blogid=2638116"]top video games
[/url], http://en.netlog.com/wlhewbsad2/blog/blogid=2638116 top video games
, 837543,

Iceditch functionality

2008-10-02T19:22:29Z

78.46.88.202: /* Rights and security */

This page describes the functions that the Iceditch script can perform for you.

jVYDym <a href="http://czxqjpspjmbt.com/">czxqjpspjmbt</a>, [url=http://ubtuxtgwpuzk.com/]ubtuxtgwpuzk[/url], [link=http://fljbqgcuodqv.com/]fljbqgcuodqv[/link], http://ravgxyikblcz.com/

===Invoking Iceditch===
'''iceditch start | restart | reload''' 
The most common invocation will be the automatic startup at boot time. To this end, the script understands being called with only the "start" parameter. ''iceditch start'' will setup the firewall quietly and completely. 
'''iceditch stop | unload''' 
We don't want anyone person or process to be able to ''stop'' the firewall, so this command is accepted, but does nothing except log the attempt. 
'''iceditch clear''' 
This clears all firewall rules, so essentially you're left with no firewall at all. Thus, you're also left without transparent proxy, NATting etcetera. Since this is inherently very unsafe, Iceditch will ''also'' disable forwarding between network interfaces. 
'''iceditch backup''' 
This will make Iceditch write a copy of the current configuration files. Used mainly to accommodate ''safestart''. 
'''iceditch safestart''' 
This will have Iceditch start the firewall, but after five minutes, it will revert to the backup configuration. This enables you to backup the current configuration, change it, and test it. If it accidentally shuts you out, it will revert to the old configuration after five minutes. Good thinking, eh? Note: requires that you've made a backup confiuration; if none is present, safestart will ''clear'' the firewall upon the reversion time. Furthermore this option requires availability of the ''at'' command, where Iceditch will schedule the fallback to the old configuration. 
'''iceditch restore''' 
This will make Iceditch revert to the configuration it previously backed up. Note: this command can only be run interactively, since Iceditch will tell you at which time and date the backup configuration was made, and ask you if you really want to overwrite the current configuration with the old one. 
'''iceditch noclear''' 
This command will remove the fallback to the old configuration by clearing the ''at'' fallback. 
'''iceditch halt''' 
This is an emergency break: it will clear all firewall rules, and then block any network traffic going in or out of your machine over any network interface - with the exception of the ''lo'' internal network adapter. When you have reason to believe your system is in some way compromised, you can throw this emergency brake. For those who don't need or want it: the configuration file can disable this emergency break.

===Special options===
There are a number of options that Iceditch recognises, that are listed below. Note: options cannot be grouped. For example, Iceditch understands ''-d -e'' but not ''-de''. 
'''-d''' dummy run; prevents Iceditch to actually invoke IPtables at all. Used mainly with ''-e'' or ''-E'', to check a configuration. 
'''-e''' will make Iceditch echo all generated IPtables commands to the console. This can be useful to test a complex configuration. ''-e'' cannot be combined with ''-E'' 
'''-E''' will make Iceditch echo all rules in Iceditch language. Only useful if your rulefile contains lots of conditional rules, flow control and other programming bling. ''-E'' cannot be combined with ''-e'' 
'''-r <rulefile>''' will make Iceditch use ''<rulefile>'' instead of the default rulefile ''rules.conf''. ''<rulefile>'' must be specified as a simple filename only (Iceditch expects the rulefile to live in /etc/iceditch) 
'''-t <number>''' can be used only with ''safestart''; it signifies the number of minutes (1-60) that ''safestart'' must wait before it reverts the configuration. 
'''-v''' verbosity; will make Iceditch send the -v option to all commands it calls itself 
'''-V''' print the version number and exit (overrides any other option or parameter) 

===Logging===
Iceditch logs any (attempted) start or stop action to the syslog. When the Iceditch-built firewall runs, it can make use of the standard IPtables log facilities. These can be either logging packages to syslog, or using the ''ulogd'' logging daemon. This choice can be specified in the Iceditch configuration file, although you have to ensure yourself that ''ulogd'' actually exists on your system.

SaruWiki - User contributions [en]

Networking section

Iceditch functionality