Source strings

128 Strings 100%
Browse Translate
3,331 Words 100%
24,646 Characters 100%
This translation is being used as source strings within this component.

Strings status

Strings Words Characters
128 3,331 24,646
All strings Browse Translate Zen
128 3,331 24,646
Read-only strings Browse Translate Zen
1 20 115
Strings with any failing checks Browse Translate Zen
1 20 115
Failing check: Multiple failing checks Browse Translate Zen

Overview

Project website www.linuxfromscratch.org
Translation process
  • Translations can be made directly.
  • Translation suggestions can be made.
  • Any authenticated user can contribute.
  • The translation uses bilingual files.
Source code repository git@git.linuxfromscratch.org:fr-lfs
Repository branch trunk
Last remote commit Automatic BLFS commit based on ea511400c9ad6f1baca13debd05f2b10ac984059 e362137d3e
Julien Lepiller authored 7 hours ago
Last commit in Weblate Automatic BLFS commit based on ea511400c9ad6f1baca13debd05f2b10ac984059 e362137d3e
Julien Lepiller authored 7 hours ago
Weblate repository https://translate.linuxfromscratch.org/git/faq/faq/
File mask blfs/*/postlfs/security/iptables.po
Translation file Not available
Last change Nov. 11, 2024, 4:20 a.m.
Last author None
9 days ago

String statistics

Strings percent Hosted strings Words percent Hosted words Characters percent Hosted characters
Total 128 3,331 24,646
Translated 100% 128 100% 3,331 100% 24,646
Needs editing 0% 0 0% 0 0% 0
Read-only 100% 128 100% 3,331 100% 24,646
Failing checks 1% 1 1% 20 1% 115
Strings with suggestions 0% 0 0% 0 0% 0
Untranslated strings 0% 0 0% 0 0% 0
Last 12 months Previous

Activity in last 12 months

0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 132 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 0 changes 1 change 0 changes 0 changes 0 changes 3 changes 0 changes
Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct

Quick numbers

3,331
Hosted words
128
Hosted strings
100%
Translated
1
Contributors
and previous 30 days

Trends of last 30 days

—
Hosted words
+100%
—
Hosted strings
+100%
—
Translated
+100%
+100%
Contributors
—
User avatar None

Source string added
636 KB
10 days ago
User avatar None

Source string added
44191ce12055da9790a92429c771ba50
10 days ago
User avatar None

Source string added
Below is a slightly modified version of Rusty Russell's recommendation from the <ulink url="https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO.html"> Linux 2.4 Packet Filtering HOWTO</ulink>. It is still applicable to the Linux 6.x kernels.
a year ago
User avatar None

Source string added
<?dbfo keep-together="auto"?><userinput>cat &gt; /etc/rc.d/rc.iptables &lt;&lt; "EOF"
<literal>#!/bin/sh

# Begin rc.iptables

# Insert connection-tracking modules
# (not needed if built into the kernel)
modprobe nf_conntrack
modprobe xt_LOG

# Enable broadcast echo Protection
echo 1 &gt; /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts

# Disable Source Routed Packets
echo 0 &gt; /proc/sys/net/ipv4/conf/all/accept_source_route
echo 0 &gt; /proc/sys/net/ipv4/conf/default/accept_source_route

# Enable TCP SYN Cookie Protection
echo 1 &gt; /proc/sys/net/ipv4/tcp_syncookies

# Disable ICMP Redirect Acceptance
echo 0 &gt; /proc/sys/net/ipv4/conf/default/accept_redirects

# Do not send Redirect Messages
echo 0 &gt; /proc/sys/net/ipv4/conf/all/send_redirects
echo 0 &gt; /proc/sys/net/ipv4/conf/default/send_redirects

# Drop Spoofed Packets coming in on an interface, where responses
# would result in the reply going out a different interface.
echo 1 &gt; /proc/sys/net/ipv4/conf/all/rp_filter
echo 1 &gt; /proc/sys/net/ipv4/conf/default/rp_filter

# Log packets with impossible addresses.
echo 1 &gt; /proc/sys/net/ipv4/conf/all/log_martians
echo 1 &gt; /proc/sys/net/ipv4/conf/default/log_martians

# be verbose on dynamic ip-addresses (not needed in case of static IP)
echo 2 &gt; /proc/sys/net/ipv4/ip_dynaddr

# disable Explicit Congestion Notification
# too many routers are still ignorant
echo 0 &gt; /proc/sys/net/ipv4/tcp_ecn

# Set a known state
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT DROP

# These lines are here in case rules are already in place and the
# script is ever rerun on the fly. We want to remove all rules and
# pre-existing user defined chains before we implement new rules.
iptables -F
iptables -X
iptables -Z

iptables -t nat -F

# Allow local-only connections
iptables -A INPUT -i lo -j ACCEPT

# Free output on any interface to any ip for any service
# (equal to -P ACCEPT)
iptables -A OUTPUT -j ACCEPT

# Permit answers on already established connections
# and permit new connections related to established ones
# (e.g. port mode ftp)
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT

# Drop any incoming MULTICAST or BROADCAST packet before logging:
# The box outputs several of them when using netbios or mDNS, and those
# appear immediately as incoming, which clutters the log.
iptables -A INPUT -m addrtype --dst-type BROADCAST,MULTICAST -j DROP

# Log everything else.
iptables -A INPUT -j LOG --log-prefix "FIREWALL:INPUT "

# End $rc_base/rc.iptables</literal>
EOF
chmod 700 /etc/rc.d/rc.iptables</userinput>
a year ago
User avatar None

Source string added
<xref linkend="libpcap"/> (required for BPF compiler or nfsynproxy support), <ulink url="https://github.com/tadamdam/bpf-utils">bpf-utils</ulink> (required for Berkeley Packet Filter support), <ulink url="https://netfilter.org/projects/libnfnetlink/">libnfnetlink</ulink> (required for connlabel support), <ulink url="https://netfilter.org/projects/libnetfilter_conntrack/">libnetfilter_conntrack</ulink> (required for connlabel support), and <ulink url="https://netfilter.org/projects/nftables/">nftables</ulink>
a year ago
User avatar None

Source string added
xtables-multi
a year ago
User avatar None

Source string added
is a binary that behaves according to the name it is called by
a year ago
User avatar None

Source string added
<command>xtables-multi</command>
a year ago
User avatar None

Source string added
nfsynproxy
a year ago
User avatar None

Source string added
(optional) configuration tool. SYNPROXY target makes handling of large SYN floods possible without the large performance penalties imposed by the connection tracking in such cases
a year ago
Browse all translation changes