Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| efw:settings [2020/08/06 23:11] – Bernard Condrau | efw:settings [2025/07/30 15:57] (current) – [Phishtank] Bernard Condrau | ||
|---|---|---|---|
| Line 20: | Line 20: | ||
| ===== Phishtank ===== | ===== Phishtank ===== | ||
| You might want to disable phishtank to avoid false positives, for example on www.google.com | You might want to disable phishtank to avoid false positives, for example on www.google.com | ||
| + | - Disable //Proxy --> DNS --> Anti-Spyware// | ||
| - Modify the script which downloads the malware definitions from phishtank, add the following before the script code:< | - Modify the script which downloads the malware definitions from phishtank, add the following before the script code:< | ||
| import sys | import sys | ||
| - | sys.exit(0)</ | + | sys.exit(0)</ |
| - Delete the malware definitions file, or modify the file to avoid the false positives:< | - Delete the malware definitions file, or modify the file to avoid the false positives:< | ||
| + | - Remove the content of the conf file for dnsmasq. This file will be overwritten at next reboot, but because of the missing phishtank.csv it will be empty, however, it's necessary for a successful start of dnsmasq:< | ||
| + | :d9999d | ||
| + | : | ||
| - | ===== Firewall | + | ===== Firewall ===== |
| + | ==== SSH port forwarding ==== | ||
| + | * add hosts to be accessed from within the LAN to //Custom hosts// in menu // | ||
| + | * port forwards from RED to GREEN work for hosts behind a fixed ip address on RED when accessed from LAN | ||
| + | * port forwards from RED to GREEN do not work for hosts behind a ddns ip address on RED when accessed from LAN. Make sure incoming and forward port range is the same to allow access from within the LAN. | ||
| + | ==== iptables | ||
| Check whether the firewall is set and hit on a specific port with:< | Check whether the firewall is set and hit on a specific port with:< | ||