Where to find a good intro to ipchains for a dial-up linux box ?
Hi, much is read about ipchains in this list. I know there are also howtos about this subject, sure. But maybe somebody could give me a hint concerning a good introduction to how to set-up a firewall using ipchains with SuSE? Unfortunately I found only manuals which explain how to firewall bigger networks, but I have a single host which I connect from time to time to the net. So I think setting-up such a thing should be a lot easier. BUT how? Any help welcome. Regards, Marko -- O _ O 0 0 ------------------m-\o/-m------------------------------------------ Dr. Marko K"aning Tel/Fax: +49-3834 554 442 / -3834 554 301 INP Greifswald email : kaening@inp-greifswald.de
concerning a good introduction to how to set-up a firewall using ipchains with SuSE? The easiest way is for you to use the suse firewall script that comes with suse the package is called firewals.rpm on the SuSE CDs. It comes by default if you choose a network oriented system I don't know about the others. I think the package is found in the sec section of the first CD. The configuration file /etc/rc.config.d/firewall.rc.config is very easy to understand.
hi list, why shouldn't marko use the "personalfirewall" distributed by the 7.*er-SuSE (am i right? i do not know about all involved versions...;-) i am using the firewall-script for myself developed by marc, but what is the problem with the easy going personal-one?! greets, daniel
Hi Marko, the best way to set up an firewall easy and fast is to use the suse-firewall-skript. Everything is explained well in the configuration-file /etc/rc.config.d/firewall???*. All you have to do is define your DEV_WORLD (ippp0 or ppp0), then you should be ready to go! Later you can try this one: open up high-ports only for dns and ftp-data. Be sure to activate suse-firewall in yast->administration->change configuration file! Hope that helps. Best regards, Ralf Ronneburger Marko Kaening schrieb:
Hi,
much is read about ipchains in this list. I know there are also howtos about this subject, sure. But maybe somebody could give me a hint concerning a good introduction to how to set-up a firewall using ipchains with SuSE?
Unfortunately I found only manuals which explain how to firewall bigger networks, but I have a single host which I connect from time to time to the net. So I think setting-up such a thing should be a lot easier. BUT how?
Any help welcome.
Regards, Marko
-- O _ O 0 0 ------------------m-\o/-m------------------------------------------ Dr. Marko K"aning Tel/Fax: +49-3834 554 442 / -3834 554 301 INP Greifswald email : kaening@inp-greifswald.de
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
Jo, On 19-Mar-01 Marko Kaening wrote:
Hi,
much is read about ipchains in this list. I know there are also howtos about this subject, sure. But maybe somebody could give me a hint concerning a good introduction to how to set-up a firewall using ipchains with SuSE?
Unfortunately I found only manuals which explain how to firewall bigger networks, but I have a single host which I connect from time to time to the net. So I think setting-up such a thing should be a lot easier. BUT how?
You can read SuSE's documents regarding their firewall, or you may consult http://linux-firewall-tools.com/linux/firewall/index.html , an excellent site by Robert L. Ziegler who also wrote a good book about firewalling with ipchains, which is dedicated to single user systems or small networks (Linux Firewalls, 1999 by Robert L. Ziegler, New Riders, ISBN 0-7357-0900-9, $39.99). There's also a german version available (I think from Markt+Technik - check Amazon et al. for more information). On Ziegler's Site you can also construct a pretty good ipchains-based firewall script on-the-fly which is very useable and a good basis of own developements.
Any help welcome.
Regards, Marko
---
Boris Lorenz
Marko Kaening wrote:
Hi,
much is read about ipchains in this list. I know there are also howtos about this subject, sure. But maybe somebody could give me a hint concerning a good introduction to how to set-up a firewall using ipchains with SuSE?
Unfortunately I found only manuals which explain how to firewall bigger networks, but I have a single host which I connect from time to time to the net. So I think setting-up such a thing should be a lot easier. BUT how?
Any help welcome.
maybe you take a look at www.little-idiot.de ? there's a good firewall manual i think. HTH -- Mit freundlichen Gruessen / best regards, Sven Michels Network Operating Center / Infrastructure ----------------------------------------- intraDAT AG Wilhelm Leuschner Strasse 7 u. 9-11 60329 Frankfurt / Germany Tel: +49 69 256 29 - 0 Fax: +49 69 256 29 - 256 http://www.intradat.com ----------------------------------------- Besuchen Sie uns vom 22.03.01-28.03.01 auf der CeBIT in Hannover, Halle 3 Stand E45 -----------------------------------------
Marko Have a look at ....... http://www.noether.freeserve.co.uk there's a good security page. See also ...... http://www.linuxnewbie.org when you've had a look at those I can mail a firewall script to you that I wrote myself. I used to help Robert Zeigler with his work on firewalls. He has now written a book called "Linux Firewalls". You can view the book at.... http://www.newriders.com also... http://www.sheflug.co.uk/newriders.html the new SuSE firewall which is available as an RPM is excellent but it doesn't help you to learn too much about ipchains. Iptables is now coming into use. If you get to know ipchains then iptables should be easy to understand. Thanks Richard Sheffield Linux User's Group http://www.sheflug.co.uk
Thanks to all of you for your many hints!!! Marko
participants (7)
-
Boris Lorenz -
Daniel Quappe -
Marko Kaening -
Ralf Ronneburger -
Richard -
semat -
Sven Michels