Re: [LUG] Firewall - info and reviews

[Kai Hendry <hendry@xxxxxxxxxxxxxx>]

I think firestarter is crap. Is crashed while I did a nmap on my my
machine. Simply use iptables. In debian, I configure my firewall, like
so:

Block all incoming connections, except for ssh.

iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT
iptables -A block -j DROP
iptables -A INPUT -j block
iptables -A FORWARD -j block
iptables -L
iptables -I block -i ppp0 -p tcp --dport 22 -j ACCEPT
iptables -L
/etc/init.d/iptables save_active



On to, syys?? 12, 2002 at 01:23:05 +0100, Paul Hewson wrote:
> Hi,
>
> I know of IpCop as a firewall, but wondered what there might be that could run 
> on the machine it is protecting.   I think Firestarter (a Gnome project) can 
> run on the same machine it is protecting.
>
> Whilst I can appreciate the advantages of IpCop as a minimalist machine, if 
> you can't always guarantee a laptop (say) is working behind a firewall I was 
> interested in what else might be available.   And particularly interested 
> where there might be reviews and so on.


--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.