-
December 2nd, 2001, 05:54 AM
#1
Linux Security/firewall
I run Mandrake 7.2 and I have no idea how to go about setting up a secure firewall. Are there any firewalls available for download or any tutorials on going about securing my box? Any help would be greatly appreciated. Thanx.
[shadow]Prepare ship for ludicrous speed![/shadow]
-
December 2nd, 2001, 06:28 AM
#2
I have asked that same question before, and was pointed in the direction of Bastille. It seems to have worked fine for me so far. The only difference is I wanted to lock down a Red Hat box. I believe it works for Mandrake too, though.
-
December 2nd, 2001, 06:38 AM
#3
Thanx for the info. I just looked over a CD that I have that came with a *nix security book and it has that firewall as well as a few other utilities. I will install it for sure. Thanx again.
[shadow]Prepare ship for ludicrous speed![/shadow]
-
December 2nd, 2001, 09:42 AM
#4
-
December 2nd, 2001, 11:46 AM
#5
I have mandrake 8.0 and as i can recall there is a firewall that comes with it. It is fairly simple to put it on if you just go into mandrake contol center and under security you have a tab to configure firewall ... I am not sure but i think it was tiny firewall that comes on cd's. Anyway i have no idea about mandrake 7.2 i assume you can download one.
-
December 2nd, 2001, 02:20 PM
#6
I use Mandrake 7.1, and in my Linuxconf > Security dialog I've got a Network Something-or-others section which allows me to configure routers and an ipchains based basic firewall.
-
December 5th, 2001, 05:01 PM
#7
For firewall information, it's a good idea to get to know what the wondrous 'ipchains' can do for you. Standard installations (RH and other RPM based linuxes) have it by default and it can definitely either A: make your system secure on a rule-based system or B: totally lock you inside with no way out (nooooo!)!
Seriously, ipchains, for me, has been a lesson in how ports and protocols work (tcp/udp) for local intranets and internet access.
It does just about everything you can think of from masquerading, filtering, denial, rule-based permission, etc...
In coordinance with ssh (public/private key exchange and 'trusted hosts/users'), you can make a box pretty f'ing secure.
http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO.html
http://www.openssh.org
We the willing, led by the unknowing, have been doing the impossible for the ungrateful. We have done so much with so little for so long that we are now qualified to do just about anything with almost nothing.
-
December 5th, 2001, 05:07 PM
#8
A great site about firewalls (all sorts) www.firewalls.com
Or if you want to easily setup a machine as a firewall then try smoothwall.
-
December 5th, 2001, 06:33 PM
#9
Member
If you are comfortable with rebuilding your kernel, or willing to dive in with some reading on doing it. I would suggest getting getting the latest kernel sources (2.4.16 and *not* 2.5.0) from http://www.kernel.org. Then get the grsecurity patch from http://www.grsecurity.net, it has the following features that together with a properly configured firewall like iptables will give you some pretty great security.
<snip from grsecurity>
OpenWall Non-executable Stack
CONFIG_GRKERNSEC_STACK
If you say Y here, your system will not allow execution of code on the stack, making buffer overflow exploitation more difficult.
Gcc trampoline support
CONFIG_GRKERNSEC_STACK_GCC
If you say Y here, the system will support trampoline code along with the stack protection. If you do not have any programs on your system that require this (glibc 2.0 users must say YES to this option) you may say no here.
There is a long list of others, I recommend at least checking it out.
-
December 5th, 2001, 07:02 PM
#10
Ummm, to my knowledge, every 2.4 Kernel-based linux distribution includes netfilter, does it not?
Netfilter is a stateful packet filtering firewall, and you can access it via iptables or ipchains. If you're willing to learn, you can do quite a lot with it.
Chris Shepherd
The Nelson-Shepherd cutoff: The point at which you realise someone is an idiot while trying to help them.
\"Well as far as the spelling, I speak fluently both your native languages. Do you even can try spell mine ?\" -- Failed Insult
Is your whole family retarded, or did they just catch it from you?
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|