Skip to content

Glossary: Logs and Data Sources for Investigations

nftables

The Linux firewall. On the shop server it logged and dropped new inbound TCP connections, except on ports 22 and 80, with the label 'KC-FW DROP'.

Where the book teaches it

Related terms

Firewall logSYN