Hi Mario, try SuSEFirewall2, which is quite easy to understand and helps you setting up a rather complex firewall without expert knowledge on netfilters. regards, Stefan -----Ursprüngliche Nachricht----- Von: mario libraro [mailto:m.libraro@fulltrading.it] Gesendet: Freitag, 30. November 2001 12:09 An: suse-security@suse.com Betreff: [suse-security] Iptables, netfiltering? I need only... Hi people, I installed up a linux SuSE 7.2 server with Oracle 9i and Apache/Tomcat. All works very nice. Now i have only a need, for security reasons: I have to administer this server remotely so i need this configuration: - port 80: open worldwide; - port 1521 (Oracle) open only for a C-class address, say x.y.z.*; - port 22 as above; I read various howto and faqs about netfilter and iptables but they talks about nat, ipforwarding, ipmasquerading... I think I need something much more simple.. a simple filter of incoming packets.. isn't it? Can someone be so nice to tell me what i exactly need, whether I have or not to recompile kernel and give me a scratch of a possible configuration?. I'm confused, help me! Thanks in advance for your time. -- Mario Libraro Web Applications Developer Fulltrading S.p.A. 00148 Roma - Via Di Affogalasino, 105 tel. +39 06 65 73 170 fax +39 06 65 73 529 mob. +39 347 5205 752 email: m.libraro@fulltrading.it m.libraro@tiresia.it web: www.fulltrading.it -- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com