If you don't run any server, why do you need a firewall?
I can't seem to get a firewall going. I've tried Bastille, Shorewall, Firestarter and Guarddog. Best I can get is a solid wall. Nothing in or out.
Tried Webmin with and without Shorewall modules.
I'm using 2.6.5 on Knoppix/Debian.
Using PPPoE to my ADSL provider. IP provided by DHCP.
ISPs DNS is 203.0.178.191.
ADSL Modem is set up as a bridge.
eth0 -> disconnected (currently only the one system)
eth1 -> ppp0 (ADSL)
http://192.168.0.1 gets me into the modem in windows but not in linux?...
It's a home system used for internet, e-mail, etc.
No servers. No need for any external access.
Can anyone help me with rules for iptables?
'IPtables for Dummies' sort of stuff...
--
Toosmoky.
Ride the Penguin...
http://toosmoky.d2.net.au
If you don't run any server, why do you need a firewall?
to keep unwanted traffic from your computer. it is advisable to have one.
i have some 10-20 pages of log/day from things atempting my computer,
ok mostly calls to known trojans... and ofcource atempts to use known vounerabilities in misc software Outlook... and |gasp| yes even linux software, an previous version of cgiemail to name one.
i regularly upgrade and patch my computer and have minimum of installed software (Debian and slackware, none above ~400Mb installed).
as number of posible security holes increase with number of programs... i keep them to minimum and have a well patched kernel with a good iptables script and two firewals beween me and the net. one linux router/firewall and one D-link (for the w-lan).
http://ww.debian.org/security/ for more on linux security (Knoppix is basicly Debian so...)
I asked 'Toosmokey' why he want's a firewall, and he is running linux, not outlook or things like that.. it is advisable to have one.
In my opinion, firewalls are the hype of the day.
Most private users don't need any server, so running a firewall is the wrong decision.
The traffic isn't away of your computer - it's on the firewall.
If you don't listen to a port, how shall your system get affected?
I don't run cgiemail and perhaps Toosmokey doesn't too.
Sorry, but I cannot find an argument in your post.
I don't start inetd automatically.
When it is started, the services are only enabled in the local net.
No need for a firewall at all, nor for an additional computer consuming power to make some noise and write funny logfiles.
And I don't need a router (with an additional firewall) too.
Dell PowerEdge R720 Server - 2x8c CPU,256Gb RAM, 128Gb SSD/3x900Gb SAS, Proxmox
$340.00
Supermicro 4U 36 Bay Storage Server 2.4Ghz 8-C 128GB 1x1280W Rails TrueNAS ZFS
$712.98
DELL PowerEdge R730XD 24x 2.5" Server Dual 750W Dual Heatsink - BareBones TESTED
$269.99
HP ProLiant DL360 G9 Server 2x E5-2660v3 2.60Ghz 20-Core 96GB P440ar
$304.35
Dell PowerEdge R620 Server 2x E5-2660 v1 2.2GHz 16 Cores 256GB RAM 2x 300GB HDD
$89.99
Dell PowerEdge R730XD 28 Core Server 2X Xeon E5-2680 V4 H730 128GB RAM No HDD
$389.99
HP Proliant DL360 Gen9 28 Core SFF Server 2X E5-2680 V4 16GB RAM P440ar No HDD
$196.95
HP ProLiant DL360 G9 2x Xeon E5-2690 V3 24 Cores 2.6GHz P440ar 32GB DDR4
$119.99
DELL PowerEdge R730 Server 2x E5-2680v4 2.4GHz =28 Cores 32GB H730 4xRJ45
$284.00
Dell Poweredge R640 8 SFF Server No HDDs/ CPUs/ RAMs/ Cards/Fan/PSU
$419.99