View previous topic :: View next topic |
Author |
Message |
myles Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
Joined: 25 Jan 2005 Posts: 83
|
Posted: Tue Feb 08, 2005 4:55 am Post subject: firewall question |
|
|
Since I use ADSL, I setup my connection through adsl-setup. Could someone please tell me the difference between setting up the firewall in adsl-setup and through something like iptables like in this guide? |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Sith_Happens Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/175271068941f9ba0c93f85.png)
Joined: 15 Dec 2004 Posts: 1807 Location: The University of Maryland at College Park
|
Posted: Tue Feb 08, 2005 5:26 am Post subject: |
|
|
I've never used adsl-setup, but pretty much all packet-filtering firewalls are going to use iptables. Probably what adsl-setup does is create a startup script which configures iptables. I use shorewall, which configures iptables and netfilter (goes along with iptables). _________________ "That question was less stupid; though you asked it in a profoundly stupid way."
I'm the brains behind Jackass! | Tutorials: Shorewall |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
myles Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
Joined: 25 Jan 2005 Posts: 83
|
Posted: Tue Feb 08, 2005 5:33 am Post subject: |
|
|
So I suppose my firewall is set then? |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
CriminalMastermind Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
![](images/avatars/14651757163fbb19b4905a5.png)
Joined: 19 Nov 2003 Posts: 132 Location: toronto
|
Posted: Tue Feb 08, 2005 7:51 am Post subject: |
|
|
well, if you want to see what is in the filter iptable, then running this...
Code: | iptables -t filter -L |
would tell you.
something looking like this...
Code: | Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
|
would be empty and thus, no firewall with iptables.
if this box is directly connected to the internet and you want to see if your firewall is up and working, then the best thing to do would be to goto an online portscaning web page. the only own i know of is shield's up at grc (i'm sure google would come back with others). running this test will tell what packet's your computer responds to. _________________ "I can picture a perfect world that knows of no war... and I can picture me attacking that world, because they'd never expect it." |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Sith_Happens Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/175271068941f9ba0c93f85.png)
Joined: 15 Dec 2004 Posts: 1807 Location: The University of Maryland at College Park
|
Posted: Tue Feb 08, 2005 6:33 pm Post subject: |
|
|
Thanks for the link CriminalMastermind, I used shields up and found that for some reason my auth/ident port 113 was closed instead of stealthed, which was a suprise to me. Now I passed their TruStealth test with flying colors, and of course filled my log files with the full record of thier portscan. ![Laughing :lol:](images/smiles/icon_lol.gif) _________________ "That question was less stupid; though you asked it in a profoundly stupid way."
I'm the brains behind Jackass! | Tutorials: Shorewall |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
CriminalMastermind Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
![](images/avatars/14651757163fbb19b4905a5.png)
Joined: 19 Nov 2003 Posts: 132 Location: toronto
|
Posted: Wed Feb 09, 2005 9:04 am Post subject: |
|
|
Sith_Happens wrote: |
Thanks for the link CriminalMastermind |
not a problem, glad it helped _________________ "I can picture a perfect world that knows of no war... and I can picture me attacking that world, because they'd never expect it." |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
myles Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
Joined: 25 Jan 2005 Posts: 83
|
Posted: Wed Feb 09, 2005 9:34 pm Post subject: |
|
|
CriminalMastermind wrote: | well, if you want to see what is in the filter iptable, then running this...
Code: | iptables -t filter -L |
would tell you.
something looking like this...
Code: | Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
|
would be empty and thus, no firewall with iptables.
if this box is directly connected to the internet and you want to see if your firewall is up and working, then the best thing to do would be to goto an online portscaning web page. the only own i know of is shield's up at grc (i'm sure google would come back with others). running this test will tell what packet's your computer responds to. |
Well I obvoiusly got an error saying modules not loaded. I guess I gotta get working on setting up firewall now. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Sith_Happens Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/175271068941f9ba0c93f85.png)
Joined: 15 Dec 2004 Posts: 1807 Location: The University of Maryland at College Park
|
Posted: Wed Feb 09, 2005 11:04 pm Post subject: |
|
|
Do you have iptables installed? _________________ "That question was less stupid; though you asked it in a profoundly stupid way."
I'm the brains behind Jackass! | Tutorials: Shorewall |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Sith_Happens Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/175271068941f9ba0c93f85.png)
Joined: 15 Dec 2004 Posts: 1807 Location: The University of Maryland at College Park
|
Posted: Tue Feb 15, 2005 7:42 pm Post subject: |
|
|
This post has been inactive for a while so I'm going to assume it's solved and stop watching it. If so be sure to append [SOLVED] to the topic of your first post. If you need more help just pm me. Adios . _________________ "That question was less stupid; though you asked it in a profoundly stupid way."
I'm the brains behind Jackass! | Tutorials: Shorewall |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|