Firewall restrictions

Report problems and success stories with Gargoyle on various hardware platforms.

Moderator: Moderators

Post Reply
nathan974
Posts: 28
Joined: Fri Jun 09, 2023 12:01 pm

Firewall restrictions

Post by nathan974 »

Good morning,
I'm working on the restriction in gargoyle in ssh and I need some advice because I'm struggling a bit.
Here's what I do:
-A egress_restrictions -p tcp -m WEBURL --contains Vultr Holdings, LLC --domain_only -j REJECT --reject-with tcp-reset
I place this rule in firewall.user but nothing happens. Any idea why??

Lantis
Moderator
Posts: 6705
Joined: Mon Jan 05, 2015 5:33 am
Location: Australia

Re: Firewall restrictions

Post by Lantis »

Is there any reason you’re not using the Gargoyle config file?
I don’t know what time the firewall.user file gets installed but it might be too early and the chains may not exist yet.
http://lantisproject.com/downloads/gargoyle_ispyisail.php for the latest releases
Please be respectful when posting. I do this in my free time on a volunteer basis.

nathan974
Posts: 28
Joined: Fri Jun 09, 2023 12:01 pm

Re: Firewall restrictions

Post by nathan974 »

Hi @Lantis,
I'm going back to school to get a degree as a network administrator so I'm trying to work on my SSH, Firewall, etc....
And since I have Gargoyle on hand I take advantage of it.

nathan974
Posts: 28
Joined: Fri Jun 09, 2023 12:01 pm

Re: Firewall restrictions

Post by nathan974 »

In the gargoyle interface by applying the restrictions I can see that it adds a rule in:
etc/config/firewall
Image

Lantis
Moderator
Posts: 6705
Joined: Mon Jan 05, 2015 5:33 am
Location: Australia

Re: Firewall restrictions

Post by Lantis »

The chains are very interdependent and certain gargoyle processes generate the necessary chains before setting up the restrictions.
I think it is best to stick with that method.

Besides, you’re using custom Gargoyle netfilter modules. You’re NEVER going to find those available on a real system. So it’s not a great syntax to learn.
If you’re interested sure keep looking, but I don’t know if it will help you practically.

Good luck on your study!
http://lantisproject.com/downloads/gargoyle_ispyisail.php for the latest releases
Please be respectful when posting. I do this in my free time on a volunteer basis.

nathan974
Posts: 28
Joined: Fri Jun 09, 2023 12:01 pm

Re: Firewall restrictions

Post by nathan974 »

Thank @Lantis

nathan974
Posts: 28
Joined: Fri Jun 09, 2023 12:01 pm

Re: Firewall restrictions

Post by nathan974 »

Works very well ;) ;)
Image

Post Reply