-
Junior Member
registered user
Firewall?
Is there a firewall in knoppix installed by default? if so where can I take a look at it and if not where can I get one such as ZA that doesn't require manual entry of ACL lists?
Thanks
-
Senior Member
registered user
Re: Firewall?
--If you're installed to HD, ' apt-get install firestarter ' is what I'd recommend. There's some kind of goofy firewall involving a dog somehow on the live-cd, but IIRC it's _caused_ more problems than it has solved.
--Myself, I use a home-brewed iptables script; but I've run into some bugs with it recently after switching to broadband.
Originally Posted by
rubic_cube
Is there a firewall in knoppix installed by default? if so where can I take a look at it and if not where can I get one such as ZA that doesn't require manual entry of ACL lists?
Thanks
-
if all you want to do is browse the net safely you can use this mini-script:
in /home/knoppix create a file called "blockall" and place the following script inside it:
#!/bin/sh
iptables -F
iptables -A INPUT -p all -s 127.0.0.1 -j ACCEPT
iptables -A INPUT -p tcp --syn -j DROP
(==>>note: this is the edited & corrected version of the script! <<==)
then run the following commands:
chmod +x blockall
sudo ./blockall
and that's it. All your ports are closed, you cannot run any server, but you can surf safely.
to reopen everything (to stop this script) simply execute:
iptables -F
HTH
-
Senior Member
registered user
--Have you tried ' nmap'ping a box running that script? There's no DROP rule...
Originally Posted by
andrei
if all you want to do is browse the net safely you can use this mini-script:
in /home/knoppix create a file called "blockall" and place the following script inside it:
#!/bin/sh
iptables -F
iptables -A INPUT -p all -s 127.0.0.1 -j ACCEPT
iptables -A INPUT -p
then run the following commands:
chmod +x blockall
sudo ./blockall
and that's it. All your ports are closed, you cannot run any server, but you can surf safely.
to reopen everything (to stop this script) simply execute:
iptables -F
HTH
-
Junior Member
registered user
It's ok I'll just play around with iptables some more.
-
Originally Posted by
Dave_Bechtel
--Have you tried ' nmap'ping a box running that script? There's no DROP rule...
you are absolutely correct. I am sorry about being sloppy. I edited and correted the script in my post above. thanks for pointing this out to everybody
-
Junior Member
registered user
Whenever I try and use the log command nothing happens.
The general iptables -A INPUT -j LOG to log all incoming packets does not generate anything in the syslog file, what do I need to do?
-
Originally Posted by
rubic_cube
Whenever I try and use the log command nothing happens.
The general iptables -A INPUT -j LOG to log all incoming packets does not generate anything in the syslog file, what do I need to do?
it is my understanding that this script does not allow for any logging. if you want to see how it works, you need to nmap it, or use an online port scanner.
-
Junior Member
registered user
The code logs everything, I can read the log only by doing dmesg syslog, and I can see everything that has been logged, the weird thing is if I try to open syslog any other way it says 0 bytes, so it's empty.
Similar Threads
-
By zenlakin in forum Networking
Replies: 0
Last Post: 03-29-2007, 02:07 PM
-
By b4sunset in forum Hdd Install / Debian / Apt
Replies: 1
Last Post: 06-02-2005, 03:54 AM
-
By swazi in forum Hdd Install / Debian / Apt
Replies: 3
Last Post: 10-11-2004, 04:42 PM
-
By dugstratton in forum Networking
Replies: 0
Last Post: 02-14-2004, 01:20 AM
-
By georgetoon in forum General Support
Replies: 4
Last Post: 11-21-2003, 04:09 AM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
Apple Mac Powerbook Duo 230 Vintage Laptop
$60.00
Vintage Apple Macintosh SE Case - Empty Shell - Housing retro project
$60.00
Vintage Apple Macintosh II 2 M5000 Computer no power very nice w drives card
$350.00
Vintage Apple Macintosh Powerbook 190 Series M3047 Laptop Parts/Repair
$69.00
VINTAGE 1984 Apple Macintosh 512K Numeric KEYPAD Model M0120 Cord WORKS
$179.99
VINTAGE REFURBISHED MACINTOSH SE WITH BLUESCSI RECAPPED POWER SUPPLY
$300.00
Apple Studio Display Monitor M2454 15" vintage Mac LCD
$80.00
Apple Extended Keyboard II for Mac IIgs ADB Desktop Bus Vintage M3501 M0312
$69.99
Vintage Apple Macintosh Quadra Computer Incomplete READ
$299.00
Vintage Apple Power Macintosh PC Computer M3979 7600/132
$249.50