tag
7 posts
How Windows firewall policy reaches WSL traffic under mirrored networking, and why Linux iptables rules alone cannot describe the real host exposure.
How to confirm PF state exhaustion, identify the responsible rules and sources, size memory safely, apply limits, and validate a ruleset reload.
Using the same BSD packet filter that powers macOS's Application Firewall directly, for filtering the GUI's simple allow/deny-per-app model can't express.
The layered, extensible packet-filtering architecture in Windows that both Windows Firewall and most third-party security software build on.
How FreeBSD PF evaluates rules, creates state, uses tables and anchors, performs NAT, logs decisions, and supports safe remote changes.
A complete, working nftables ruleset for a typical server — default-deny inbound, stateful connection tracking, and a handful of explicit allowed services.
Creating specific, scoped inbound and outbound Windows Firewall rules with PowerShell, rather than the common mistake of disabling it entirely.