firewall 归档 - 夜莺博客

标签：firewall

IPv6 Proxy ND: Cross-Segment Neighbor Discovery

IPv6 Proxy ND: Cross-Segment Neighbor Discovery

Use IPv6 proxy neighbor discovery when hosts share a prefix but not a segment: RFC 4389 modes, router and firewall configuration, and loop prevention.

admin admin 2026-10-13
0 0 0
HTTP/3 and QUIC: What Network Engineers Must Handle

HTTP/3 and QUIC: What Network Engineers Must Handle

HTTP/3 moves web traffic to QUIC over UDP 443. Learn the firewall, visibility and load-balancing consequences and how to test before you block or allo

admin admin 2026-10-13
0 0 0
firewalld Zones and Rich Rules: Safe Configuration

firewalld Zones and Rich Rules: Safe Configuration

Configure firewalld zones, interfaces, services and rich rules with firewall-cmd, and avoid the runtime-versus-permanent mistake that locks you out.

admin admin 2026-10-12
0 0 0
Juniper SRX 防火墙基础上网配置：SNAT 与安全策略

Juniper SRX 防火墙基础上网配置：SNAT 与安全策略

Juniper SRX 防火墙上网配置完整流程：root 与系统基础配置、接口地址与默认路由、安全区域及 host-inbound-traffic、SNAT 源地址转换、安全策略放行与 DHCP 服务，并给出 show 命令验证顺序与常见排障思路。

admin admin 2026-10-12
0 0 0
MikroTik RouterOS NAT: Masquerade and dst-nat Rules

MikroTik RouterOS NAT: Masquerade and dst-nat Rules

MikroTik RouterOS NAT guide: masquerade vs src-nat, dst-nat port forwarding, hairpin NAT rules and firewall filter order.

admin admin 2026-10-09
0 0 0
pfSense CARP High Availability: Failover Configuration

pfSense CARP High Availability: Failover Configuration

Configure pfSense CARP HA with virtual IPs, pfsync state sync and XMLRPC config sync, then verify failover in under a second.

admin admin 2026-10-09
0 0 0
nftables NAT: Masquerade and Port Forwarding Guide

nftables NAT: Masquerade and Port Forwarding Guide

Configure nftables NAT with masquerade, SNAT and DNAT port forwarding rules, plus verification and persistence on RHEL and Debian.

admin admin 2026-10-09
0 0 0
nftables Stateful Firewall with Connection Tracking

nftables Stateful Firewall with Connection Tracking

Build a stateful nftables firewall using ct state: allow established and related traffic, drop invalid packets, and open specific ports per chain.

admin admin 2026-10-08
0 0 0
Juniper SRX AppSecure: AppID and UTM Policy Setup

Juniper SRX AppSecure: AppID and UTM Policy Setup

Configure AppSecure on Juniper SRX: application identification, AppTrack visibility and unified policies that apply UTM profiles for AV and web filter

admin admin 2026-10-08
0 0 0
GTP-U Tunnel Inspection on Next-Generation Firewalls

GTP-U Tunnel Inspection on Next-Generation Firewalls

Configure stateful GTP-U and GTP-C inspection on next-gen firewalls: interface roles for S1-U/N3, GTP profiles, tunnel limits and mobile-core security

admin admin 2026-10-06
0 0 0
1 2 3 4