View Single Post
Old 01-23-2015, 01:25 PM   #16
knc1
Going Viral
knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.
 
knc1's Avatar
 
Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
Quote:
Originally Posted by msh View Post
Thank you for pointing this out. I am aware of iptables and the blocking setup is among the top ones in my TODO list.
And I am OK to admit my "unreasonable paranioa"

But this way of connection with KUAL is just brilliant idea and moves it to the next level.

My thinking about firewall was about a bit different setup, though.
Something like this
- ACCEPT all LAN IPs ranges
- ACCEPT white-listed IPs
- DROP all know evil addresses
- LOG into file system remaining attempts
- default policy: DROP
+ be able to see the log w/o connecting Kindle to PC. In KUAL (ideal, if possible) or as an eBook (less elegant)

But in first place I need to investigate if logging would be even possible. So this is where the fun part begins...
None of the logging modules are included in the Amazon build, you have to build them yourself.

I did, and posted them (somewhere here) a while ago - certainly not for the FW version you are using on your ?? model Kindle.

But the setup scripts, cross-tool-chain, and directions should still be usable.
knc1 is offline   Reply With Quote