Installing a home server - any advice?

xahodo · April 15, 2024, 4:41pm

gist.github.com

https://gist.github.com/flaviovs/103a0dbf62c67ff371ff75fc62fdded3

README.md

Iptables(8) _TARPIT_ is a useful security mechanism that can slow down or stop attacks on a network. If everyone used _TARPIT_ to block attackers, in theory their resources would be exhausted as their connection attempts would be delayed, which would discouraged people from attempting unauthorized access. Here's a brief description of how _TARPIT_ works:


> To achieve this tar pit state, iptables accepts the incoming
> TCP/IP connection and then switches to a zero-byte window. This
> forces the attacker's system to stop sending data, rather like the
> effect of pressing Ctrl-S on a terminal. Any attempts by the
> attacker to close the connection are ignored, so the connection
> remains active and typically times out after only 12–24
> minutes. This consumes resources on the attacker's system but not

This file has been truncated. show original

tarpit.sh

#
# This is the MARK we will use to flag packets that should be
# tarpitted. If you already use -m mark in your rules you may want to
# tweak the value and/or add a mask to to the rules below to avoid
# conflicts.
#
MARK=8

#
# This example uses ipset(8) and the BLACKLIST_SET list to determine

This file has been truncated. show original

Well, of course you have port knocking implemented on the port where your ssh server is active only after the port knock was successful. The script that handles the port knocking could start the ssh server and only allow traffic through if it comes from same IP address as the initial port knock, all the other traffic arriving on that port could be sent to the tarpit. Of course after 3 failed port knocking attempts, the IP where the attempts came from is blocked for ever increasing amounts of time, this combined with a tarpit can be extremely frustrating. Attempts to connect to port 22 (default ssh port) could, of course, by default lead to a tarpit.

Creativity can lead to fun situations. Have fun configuring your scripts and firewall. I’m sure you get the idea of what I mean by now.