Hands-On Linux Administration on Azure by Frederik Vos

Author:Frederik Vos
Language: eng
Format: epub
Publisher: Packt Publishing
Published: 2018-08-31T09:48:43+00:00

Restricting network access

Newer versions of systemd ( >235), as in use by Ubuntu 18.04, also support IP accounting and access lists to restrict network access.

IPAccounting=yes allows the unit to collect and analyze network data. To view the results, you can use the systemctl command:

systemctl show <service name> -p IPIngressBytes \

-p IPIngressPackets \

-p IPEgressBytes -p IPEgressPackets

As with every parameter, you can use this with systemd-run as well, for instance:

You can use IPAddressDeny to deny an IP address or an IP range. An exception can be made with IPAddressAllow. It's even possible to deny everything system-wide and whitelist per service:

sudo systemctl set-property ssh.service IPAddressAllow=any

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.