Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
firewall question
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
myles
Tux's lil' helper
Tux's lil' helper


Joined: 25 Jan 2005
Posts: 83

PostPosted: Tue Feb 08, 2005 4:55 am    Post subject: firewall question Reply with quote

Since I use ADSL, I setup my connection through adsl-setup. Could someone please tell me the difference between setting up the firewall in adsl-setup and through something like iptables like in this guide?
Back to top
View user's profile Send private message
Sith_Happens
Veteran
Veteran


Joined: 15 Dec 2004
Posts: 1807
Location: The University of Maryland at College Park

PostPosted: Tue Feb 08, 2005 5:26 am    Post subject: Reply with quote

I've never used adsl-setup, but pretty much all packet-filtering firewalls are going to use iptables. Probably what adsl-setup does is create a startup script which configures iptables. I use shorewall, which configures iptables and netfilter (goes along with iptables).
_________________
"That question was less stupid; though you asked it in a profoundly stupid way."
I'm the brains behind Jackass! | Tutorials: Shorewall
Back to top
View user's profile Send private message
myles
Tux's lil' helper
Tux's lil' helper


Joined: 25 Jan 2005
Posts: 83

PostPosted: Tue Feb 08, 2005 5:33 am    Post subject: Reply with quote

So I suppose my firewall is set then?
Back to top
View user's profile Send private message
CriminalMastermind
Tux's lil' helper
Tux's lil' helper


Joined: 19 Nov 2003
Posts: 132
Location: toronto

PostPosted: Tue Feb 08, 2005 7:51 am    Post subject: Reply with quote

well, if you want to see what is in the filter iptable, then running this...
Code:
iptables -t filter -L

would tell you.

something looking like this...
Code:
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

would be empty and thus, no firewall with iptables.

if this box is directly connected to the internet and you want to see if your firewall is up and working, then the best thing to do would be to goto an online portscaning web page. the only own i know of is shield's up at grc (i'm sure google would come back with others). running this test will tell what packet's your computer responds to.
_________________
"I can picture a perfect world that knows of no war... and I can picture me attacking that world, because they'd never expect it."
Back to top
View user's profile Send private message
Sith_Happens
Veteran
Veteran


Joined: 15 Dec 2004
Posts: 1807
Location: The University of Maryland at College Park

PostPosted: Tue Feb 08, 2005 6:33 pm    Post subject: Reply with quote

Thanks for the link CriminalMastermind, I used shields up and found that for some reason my auth/ident port 113 was closed instead of stealthed, which was a suprise to me. Now I passed their TruStealth test with flying colors, and of course filled my log files with the full record of thier portscan. :lol:
_________________
"That question was less stupid; though you asked it in a profoundly stupid way."
I'm the brains behind Jackass! | Tutorials: Shorewall
Back to top
View user's profile Send private message
CriminalMastermind
Tux's lil' helper
Tux's lil' helper


Joined: 19 Nov 2003
Posts: 132
Location: toronto

PostPosted: Wed Feb 09, 2005 9:04 am    Post subject: Reply with quote

Sith_Happens wrote:

Thanks for the link CriminalMastermind

not a problem, glad it helped
_________________
"I can picture a perfect world that knows of no war... and I can picture me attacking that world, because they'd never expect it."
Back to top
View user's profile Send private message
myles
Tux's lil' helper
Tux's lil' helper


Joined: 25 Jan 2005
Posts: 83

PostPosted: Wed Feb 09, 2005 9:34 pm    Post subject: Reply with quote

CriminalMastermind wrote:
well, if you want to see what is in the filter iptable, then running this...
Code:
iptables -t filter -L

would tell you.

something looking like this...
Code:
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

would be empty and thus, no firewall with iptables.

if this box is directly connected to the internet and you want to see if your firewall is up and working, then the best thing to do would be to goto an online portscaning web page. the only own i know of is shield's up at grc (i'm sure google would come back with others). running this test will tell what packet's your computer responds to.


Well I obvoiusly got an error saying modules not loaded. I guess I gotta get working on setting up firewall now.
Back to top
View user's profile Send private message
Sith_Happens
Veteran
Veteran


Joined: 15 Dec 2004
Posts: 1807
Location: The University of Maryland at College Park

PostPosted: Wed Feb 09, 2005 11:04 pm    Post subject: Reply with quote

Do you have iptables installed?
_________________
"That question was less stupid; though you asked it in a profoundly stupid way."
I'm the brains behind Jackass! | Tutorials: Shorewall
Back to top
View user's profile Send private message
Sith_Happens
Veteran
Veteran


Joined: 15 Dec 2004
Posts: 1807
Location: The University of Maryland at College Park

PostPosted: Tue Feb 15, 2005 7:42 pm    Post subject: Reply with quote

This post has been inactive for a while so I'm going to assume it's solved and stop watching it. If so be sure to append [SOLVED] to the topic of your first post. If you need more help just pm me. Adios 8).
_________________
"That question was less stupid; though you asked it in a profoundly stupid way."
I'm the brains behind Jackass! | Tutorials: Shorewall
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum