Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-06-18 10:29:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
398acc6fe8
graphene-os-server-infrastr.../nftables
History
Daniel Micay 398acc6fe8 nftables: drop instead of reject for unused ports 
This provides consistency with DDoS protection services placed in front
of the services rather than the behavior changing based on whether DDoS
protection is active. This doesn't help with protecting against attacks
since they'll almost always be targeting ports with services active or
exhausting inbound bandwidth via UDP reflection attacks. This appears to
be the standard approach used by most large tech companies.
2024-04-19 13:54:12 -04:00
..
nftables-attestation.conf nftables: drop instead of reject for unused ports 2024-04-19 13:54:12 -04:00
nftables-discuss.conf nftables: drop instead of reject for unused ports 2024-04-19 13:54:12 -04:00
nftables-mail.conf nftables: drop instead of reject for unused ports 2024-04-19 13:54:12 -04:00
nftables-matrix.conf nftables: drop instead of reject for unused ports 2024-04-19 13:54:12 -04:00
nftables-network.conf nftables: drop instead of reject for unused ports 2024-04-19 13:54:12 -04:00
nftables-ns1.conf nftables: drop instead of reject for unused ports 2024-04-19 13:54:12 -04:00
nftables-ns2.conf nftables: drop instead of reject for unused ports 2024-04-19 13:54:12 -04:00
nftables-social.conf nftables: drop instead of reject for unused ports 2024-04-19 13:54:12 -04:00
nftables-web.conf nftables: drop instead of reject for unused ports 2024-04-19 13:54:12 -04:00