gnu/linux security problems
i've just noticed that
- webmin | networking | linux firewall reads from the master iptables files and does NOT display any changes made to iptables by other services since system boot such as fail2ban so you need to click REVERT CONFIGURATION to get webmin to display current configuration
- webmin doesn't display iptables comments unless you click "Display comment in rules list?" (on distros derived from red hat)
- webmin loses iptables comments unless you click "Store comments as" "--comment option" (on distros derived from red hat)
- fail2ban (service fail2ban start) adds its ip chain to the begining of your iptables rules so your fail2ban chain can end up running BEFORE any REJECT and DENY rules you have configured