126k views
5 votes
What Linux security feature can be used to log, drop, reject, or alter packets?

A) SELinux
B) FirewallD
C) iptables
D) UFW

1 Answer

4 votes

Final answer:

iptables is the Linux security feature that can be used to log, drop, reject, or alter packets.

Step-by-step explanation:

The Linux security feature that can be used to log, drop, reject, or alter packets is iptables. iptables is a command-line utility that allows administrators to configure the Linux kernel's built-in firewall. It provides a flexible and powerful way to filter network traffic based on various rules and criteria.

For example, using iptables, you can create rules to log all incoming packets from a specific IP address, drop packets from a certain port, or alter packets to modify their destination address.

While SELinux, FirewallD, and UFW are also Linux security features, they serve different purposes. SELinux is a mandatory access control system that enhances the security of Linux systems, FirewallD is a dynamic firewall management tool, and UFW (Uncomplicated Firewall) is a simplified front-end for managing iptables.

User Dumbfingers
by
8.7k points