Results 1 to 9 of 9

Thread: Firewall?

  1. #1
    Junior Member registered user
    Join Date
    Mar 2005
    Posts
    12

    Firewall?

    Is there a firewall in knoppix installed by default? if so where can I take a look at it and if not where can I get one such as ZA that doesn't require manual entry of ACL lists?

    Thanks

  2. #2
    Senior Member registered user
    Join Date
    Nov 2002
    Location
    USA, IL
    Posts
    1,041

    Re: Firewall?

    --If you're installed to HD, ' apt-get install firestarter ' is what I'd recommend. There's some kind of goofy firewall involving a dog somehow on the live-cd, but IIRC it's _caused_ more problems than it has solved.

    --Myself, I use a home-brewed iptables script; but I've run into some bugs with it recently after switching to broadband.

    Quote Originally Posted by rubic_cube
    Is there a firewall in knoppix installed by default? if so where can I take a look at it and if not where can I get one such as ZA that doesn't require manual entry of ACL lists?

    Thanks

  3. #3
    Member registered user
    Join Date
    Jul 2003
    Posts
    53
    if all you want to do is browse the net safely you can use this mini-script:

    in /home/knoppix create a file called "blockall" and place the following script inside it:

    #!/bin/sh
    iptables -F
    iptables -A INPUT -p all -s 127.0.0.1 -j ACCEPT
    iptables -A INPUT -p tcp --syn -j DROP

    (==>>note: this is the edited & corrected version of the script! <<==)

    then run the following commands:

    chmod +x blockall
    sudo ./blockall

    and that's it. All your ports are closed, you cannot run any server, but you can surf safely.

    to reopen everything (to stop this script) simply execute:

    iptables -F


    HTH

  4. #4
    Senior Member registered user
    Join Date
    Nov 2002
    Location
    USA, IL
    Posts
    1,041
    --Have you tried ' nmap'ping a box running that script? There's no DROP rule...

    Quote Originally Posted by andrei
    if all you want to do is browse the net safely you can use this mini-script:

    in /home/knoppix create a file called "blockall" and place the following script inside it:

    #!/bin/sh
    iptables -F
    iptables -A INPUT -p all -s 127.0.0.1 -j ACCEPT
    iptables -A INPUT -p

    then run the following commands:

    chmod +x blockall
    sudo ./blockall

    and that's it. All your ports are closed, you cannot run any server, but you can surf safely.

    to reopen everything (to stop this script) simply execute:

    iptables -F

    HTH

  5. #5
    Junior Member registered user
    Join Date
    Mar 2005
    Posts
    12
    It's ok I'll just play around with iptables some more.

  6. #6
    Member registered user
    Join Date
    Jul 2003
    Posts
    53
    Quote Originally Posted by Dave_Bechtel
    --Have you tried ' nmap'ping a box running that script? There's no DROP rule...
    you are absolutely correct. I am sorry about being sloppy. I edited and correted the script in my post above. thanks for pointing this out to everybody

  7. #7
    Junior Member registered user
    Join Date
    Mar 2005
    Posts
    12
    Whenever I try and use the log command nothing happens.

    The general iptables -A INPUT -j LOG to log all incoming packets does not generate anything in the syslog file, what do I need to do?

  8. #8
    Member registered user
    Join Date
    Jul 2003
    Posts
    53
    Quote Originally Posted by rubic_cube
    Whenever I try and use the log command nothing happens.

    The general iptables -A INPUT -j LOG to log all incoming packets does not generate anything in the syslog file, what do I need to do?
    it is my understanding that this script does not allow for any logging. if you want to see how it works, you need to nmap it, or use an online port scanner.

  9. #9
    Junior Member registered user
    Join Date
    Mar 2005
    Posts
    12
    The code logs everything, I can read the log only by doing dmesg syslog, and I can see everything that has been logged, the weird thing is if I try to open syslog any other way it says 0 bytes, so it's empty.

Similar Threads

  1. firewall??
    By zenlakin in forum Networking
    Replies: 0
    Last Post: 03-29-2007, 02:07 PM
  2. Guarddog-Firewall
    By b4sunset in forum Hdd Install / Debian / Apt
    Replies: 1
    Last Post: 06-02-2005, 03:54 AM
  3. Firewall
    By swazi in forum Hdd Install / Debian / Apt
    Replies: 3
    Last Post: 10-11-2004, 04:42 PM
  4. firewall
    By dugstratton in forum Networking
    Replies: 0
    Last Post: 02-14-2004, 01:20 AM
  5. Firewall
    By georgetoon in forum General Support
    Replies: 4
    Last Post: 11-21-2003, 04:09 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Intel Core i7-3770K 3.5 GHz Processor picture

Intel Core i7-3770K 3.5 GHz Processor

$39.00



INTEL CORE I9-10940X X-SERIES PROCESSOR | 3.30GHZ | SRGSH picture

INTEL CORE I9-10940X X-SERIES PROCESSOR | 3.30GHZ | SRGSH

$179.99



INTEL CORE I7-870 SLBJG 2.93GHZ LGA1156 4 CORE CPU PROCESSOR picture

INTEL CORE I7-870 SLBJG 2.93GHZ LGA1156 4 CORE CPU PROCESSOR

$23.00



Intel SRF90 Xeon Gold 6248 2.50GHz 20 Core LGA 3647 Server CPU Processor picture

Intel SRF90 Xeon Gold 6248 2.50GHz 20 Core LGA 3647 Server CPU Processor

$55.99



Intel Core i5-12500T SRL5W 2GHz 18MB 6 Core Socket LGA1700 Desktop CPU Processor picture

Intel Core i5-12500T SRL5W 2GHz 18MB 6 Core Socket LGA1700 Desktop CPU Processor

$114.99



Intel i7-8700 Coffee Lake 3.2GHz 6-Core Max Turbo 4.6GHz Processor picture

Intel i7-8700 Coffee Lake 3.2GHz 6-Core Max Turbo 4.6GHz Processor

$67.99



Intel Core i7-7700 Kaby Lake Quad-Core 3.6 GHz Processor LGA 1151 picture

Intel Core i7-7700 Kaby Lake Quad-Core 3.6 GHz Processor LGA 1151

$39.99



Intel SR3XE Core i5-8500 3.0GHz 9M Socket 1151 6-Core CPU Processor *Tested* picture

Intel SR3XE Core i5-8500 3.0GHz 9M Socket 1151 6-Core CPU Processor *Tested*

$32.99



INTEL CORE I9-10980XE PROCESSOR | 3.00GHZ | SRGSG picture

INTEL CORE I9-10980XE PROCESSOR | 3.00GHZ | SRGSG

$299.99



Intel Core i9-9900K SRG19 3.60GHz 16MB 8-Core LGA1151 B Grade CPU Processor picture

Intel Core i9-9900K SRG19 3.60GHz 16MB 8-Core LGA1151 B Grade CPU Processor

$175.00