Bpf articles

Last change: 2025-01-06

Seccomp, or secure computing, is a security measure in the Linux kernel that allows processes to protect themselves against unexpected or unwanted behavior.

Systemd syscall filtering

Last change: 2025-01-06

Learn more about the system calls (syscalls) that systemd may use in commands and unit files, such as with SystemCallFilter property.

Commands:

awk
grep
sort
strings
uniq

BPFILTER: the next-generation Linux firewall

Last change: 2025-01-06

BPFILTER is one of the newer features to provide traffic filtering. Learn how it works and why it may replace iptables as the firewall on Linux systems.

Commands:

tcpdump

Linux security guide: the extended version

Last change: 2025-01-06

Feeling overwhelmed with the options available to secure your Linux system? With this guide, we walk step-by-step through the option, tools, and resources.

Differences between iptables and nftables explained

Last change: 2025-01-06

An overview of the differences between firewall technologies iptables and nftables. We highlight the major differences like simplicity and management.