Of walls and fire and such whatnot

I’ve recently been doing some iptables stuff at work, and I took a look at some terminal based helpers (Jay’s Iptables Firewall and ipmenu) but honestly they’re not really that much easier than writing your own chains (or basing it off something simple).

Some more scripts:

LinuxGuruz (how leet) has a list of IPTABLES related links (this Firewall Admins Guide to Porn is an interesting read). For log analysis, IPtables log analizer (php/perl web-based) looks pretty good.

Ref: blueflux Iptables-tutorial, FAQ: Firewall Forensics (RG’s most recent pub was a forensic analysis of slammer)

Soldering On

ARE FILE SWAPPING NETWORKS CACHEABLE? CHARACTERIZING P2P TRAFFIC (PDF):

Our analysis of the traffic computed a 67%

byte-hit-rate which compares favorably with web caching

hit rates known to be in the range of 30% to 60%. Further, it

was shown that the disk space required for effective caching

of P2P traffic is small enough to be practical – close to

maximal caching is attained with 200 GB disk space.

Finally our analysis concludes that the byte-hit-rate

computed at our installation correlated with the traffic

volume, indicating that a higher byte-hit-rate may be

expected on links with a heavier traffic load.

I got an email from Tristan Louis about his proposal for a full disclosure xml feed, but well, again, I have to ask, what’s the point? Do you exchange a full disclosure xml feed with people you meet at a party before talking to them? Hint: if you think this would be useful in your day to day life, you are probably hanging around with the wrong people. (or perhaps you simply need a better rl-FOAF protocol?)

(this is totally ignoring the point of why a marketer would include this feed and getting browsers to adopt interfaces for parsing and displaying them. still, makes for fun conversation I suppose)

Chris probably has done the most in-depth (and interesting) research on this (which includes a ragin cow network count, all the urls, and an interview w/ the Director of marketing for this project. (And yes, Casey is cute, but I have better things to do with my $19.95 a month)