Have you ever needed to set up a firewall in a network without anyone knowing
it was there or so that it wouldn't require you to change your network?
Welcome to the world of stealth firewalling. We dedicated one chapter in our
book, Troubleshooting Linux Firewalls, to it but honestly the topic has so
many uses, to do it justice it really needs its own book (or books!). What Is
Stealth Firewalling with Linux?Simply put, a stealth firewall is an Ethernet
bridge with filtering capabilities. This means that it's a firewall that
operates at Layer 2 of the OSI model, leveraging netfilter rules and chains
(Linux's firewall system) applied to the bridge. For those not familiar with
what a bridge is: an Ethernet bridge is a means of connecting two or more
networks/devices at the Data Link layer. The Data Link layer is the layer of
the OSI model before the Network Layer (Laye... (more)