iptables | 俺史上最強のiptablesをさらす

I have iplist.txt containing a list of ip I want to ban (one by line, extracted from a file.log and corresponding a certain condition like 3 or more access); I want to check for each ip of iplist.txt if it is already or not in iptables via its presence or not in file.dump (the iptables I've exported from iptables-save > file.dump):

I need some suggestions for best practicality, security and maintainability

The scenario is:

• We have a private VPC with some servers,
• We have users that can access server A and A only
• Some users can access A, and B.
• Other only B and so on.

They need to access to theses servers from home and office.

The current idea is having a multiuser OpenVPN server with IPTables blocking access to the servers that the user can't access

Is there another option using AWS tools (VPCs,Security Groups, ACLs, Load Balancers, or others)?

Or other solutions better than this one?

Draw of current arch:

• One boundary server that does the bridge from the open world to the Private VPC (With OpenVpn and IPTables)
• 5 servers inside the private VPC
• 10 Users with different levels of access

Thanks

I'm facing a huge slow while managing a specific remote host with a specific role.

I have tracked down the source of the slowness and found that for a very specific variable (defined for that specific host and used by that specific role), ansible and ansible-playbook takes up to 30 seconds to build it while for other variables it takes few seconds only.

I have activated verbose mode and checked log file but nothing unusual except that ansible is completely silent (no logs are added) for a very long time for the problematic variable.

My questions:

• is there a way to debug ansible to get the root cause of the issue I'm facing?
• anybody can suggest an explanation of this behavior?

Here is the outcome of printing the problematic variable iptables and another normal variable ifcfg:

I am trying to achieve the network architecture above. The Pi is connected to the drone via WiFi, and it is connected to the Access Point via ethernet.

How can I route packets via the Raspberry Pi to a Tello drone, and from a Tello drone via the Raspberry Pi to 192.168.1.100? What iptables commands could I use?

This is the simple python script I am using to send the drone commands from 192.168.1.100.

I want to create a firewall to Docker container that allows only some IPs and rejects others.

The default setting was like this:

I run a working Wireguard server with 2 Wireguard Gateways for Site-to-Site VPN and a couple of Mobile Devices with a Full Tunnel that are used occasionally. One of my Site Gateways is a RaspberryPi4 that I want to provide a WIFI-Access-Point that directly tunnels to the Wireguard Server. This RaspberryPi has working access to all connected subnets via the main Server, so Wireguard is setup properly.

I want to use my Raspi4 to roam the world and provide me a WIFI-Access-Point while any device that connects to it is directly routed into Wireguard and emerges to the web only from there. I used the standard gateway setup provided and my WIFI device can access the web but doesn't tunnel through Wireguard (yet).

I can't really find where I can configure where the access point is bound to, dnsmasq, apdconf or a simply iptables rule?

Example IPs

Server: 10.0.7.1, local network 192.168.0.1/24

Raspi4: 10.0.7.5, local network 192.168.6.5/24, WIFI 192.168.7.5/24

So far I haven't succeeded, ideas?

I'm trying to deploy the ELK stack to my developing kubernetes cluster. It seems that I do everything as described in the tutorials, however, the pods keep failing with Java errors (see below). I will describe the whole process from installing the cluster until the error happens.

Step 1: Installing the cluster

I can configure apiserver.service-node-port-range extra-config with a port range like 10000-19000 but when I specify a comma separated list of ports like 17080,13306 minkube wouldn't start it will bootloop with below error

I am learning routing with tuntap interfaces... and I had created a tun0 interface and configured Ip address with ifconfig command on different subnet and adding the gateway with ip route command and I have also used masquerading rule ... my doubt is can i ping with tuntap interface or they are only used to route the traffic or something I don't know about these interface or may be misconfiguration..

May be this question sounds me new bie and I am but give please give me correct direction..

Ok Gerhardh,

Edit: I had created tun dev like this: