Top all-time · #4988
To Linux and beyond !
Personal blog · home.regit.orgsecuritysystems
To Linux and beyond ! is a personal blog at home.regit.org about security and systems. Since 2008, 16 different Hacker News readers have linked it 16 times, most often “Why you will love nftables”. The last post was in 2017, but the archive is still widely read.
Too few sampled comments (8) to say how often HN recommends it.?
Why HN links it
Linked as a practical Linux networking reference from a netfilter-focused blog, covering nftables, IPv6 privacy addresses, port knocking and load balancing across links.
Summarised by Claude from a sample of 8 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Plaisirs et désillusions du monde moderne
Most-linked posts?
- /2011/04/ipv6-privacy/3 people · 3 mentions · first linked 2014-09-06
- Why you will love nftables2 people · 2 mentions · first linked 2014-01-20
- Nftables quick how to2 people · 2 mentions · first linked 2013-10-20
What Hacker News says?
I'm pretty sure you can do this sort of load balancing on Linux without having to install any extra software, at the IP level, with the "ip rule" and "iptables" commands. EDIT: Yep: https://home.regit.org/netfilter-en/links-load-balancing/
Comment linking /netfilter-en/links-load-balancing/
on “Combine your Wi-Fi, Ethernet and 3G connections to increase your download speed”Submitted Why you will love nftables as a story · 68 points
HN discussionI had a raspberry pi on my network via ethernet and saw it had accumulated a ton of IPv6 addresses. Ended up just disabling privacy extensions on it. If your machines reset their network connection (ie wireless reconnects) then they'll flush their IPv6 privacy addresses. Your machines might just have a long timeout before they use a new privacy address. You can find more info here: https://home.regit.org/2011/04/ipv…
Comment linking /2011/04/ipv6-privacy/
on “IPv6 privacy addresses crashed the MIT CSAIL network”Submitted Coccinelle which: a “program matching and transformation engine” as a story · 2 points
HN discussionYep, and while I'm too lazy to dig into detailed kernel histories, that's been in there for at least 9 years now: https://home.regit.org/2011/04/ipv6-privacy/ Short version: echo "2">/proc/sys/net/ipv6/conf/eth0/use_tempaddr turns on privacy extensions on eth0, and makes them the preferred addresses.
Comment linking /2011/04/ipv6-privacy/
on “IPv6 Is a Nightmare”Submitted Why you will love nftables as a story · 2 points
HN discussionhttps://home.regit.org/2014/06/pshitt-collect-passwords-used...
Comment linking /2014/06/pshitt-collect-passwords-used-in-ssh-bruteforce/
on “Patch to Log SSH Passwords – One Year Results”Submitted Investigation on an attack tool used in China as a story · 2 points
HN discussionBTW, here's some other cheats i've bookmarked. With 100+ commands, different teams' workflows are significantly different. http://ktown.kde.org/~zrusin/git/git-cheat-sheet.svg http://www.spheredev.org/wiki/Git_for_the_lazy http://jan-krueger.net/development/git-cheat-sheet-take-two http://www.gnome.org/~federico/misc/git-cheat-sheet.txt http://home.regit.org/?page_id=32 others?
Comment linking /?page_id=32
on “Git: the minimum you need to know (sorta like a cheat or nutshell)”Submitted Using NFQUEUE and libnetfilter_queue as a story · 1 points
HN discussionYeah.. true.. still prefer the config file format[1] nftables brings along though. [1] https://home.regit.org/netfilter-en/nftables-quick-howto/
Comment linking /netfilter-en/nftables-quick-howto/
on “Why you will love nftables”Submitted Nftables quick how to as a story · 1 points
HN discussionNot sure if this is the best, but I use nftables and this article helped me setup port knocking on a debian server: https://home.regit.org/2017/07/nftables-port-knocking/ Then I added a tripwire feature to make it less likely that a random port traversal would be successful. Here's a snippet of my nftables.conf: define KNOCK_PORT1 = 20000 define KNOCK_PORT2 = 30000 define KNOCK_PORT3 = 10000 define TRIPWIRE_PORT1 =…
Comment linking /2017/07/nftables-port-knocking/
on “Thoughts on having SSH allow password authentication from the Internet”Submitted Running high performance IDS on a 10gbps link as a story · 1 points
HN discussionYes, see https://home.regit.org/2011/04/ipv6-privacy/
Comment linking /2011/04/ipv6-privacy/
on “IPv6: It's time to get on board”Submitted Semantic grep for C code as a story · 1 points
HN discussion
