Home router guide and security (or lack thereof??)

IntergalacticWalrus

Hey, yesterday I've set up a home router with Gentoo, with the help of the helpful guide, and today I've noticed thanks to nmap (ran on a machine out of my local network) that all of the services on my router are open to the Internet !!!!! WTF?? I know next to nothing as to how to set up iptables, but I trusted those instructions in the guide, thinking they were safe since the author probably knew what he was doing, but it turned out it doesn't seem to lock up any ports! Have I missed something? It pretty freaked me out to notice that, according to nmap, my nfs port was open. Does it mean someone could mount my nfs exports from the 'net?

pjp · Administrator Joined: 16 Apr 2002 Posts: 20589

I haven't used the guide, but none of the "section headings" had the word security in it, so I don't see a reason to expect much security from it. Check out the Gentoo Security Handbook.
_________________
Quis separabit? Quo animo?

IntergalacticWalrus · Posted: Thu Jun 02, 2005 5:21 am Post subject:

One thing I don't understand in particular is that the guide has a line to open up ssh (iptables -A INPUT -p TCP --dport ssh -i eth1 -j ACCEPT), but from my nmap scan this seemed futile since everything else appeared open.

pjp · Administrator Joined: 16 Apr 2002 Posts: 20589

Maybe its a bug in the guide, or a typo/misconfig on your part. Have you searched bugzilla to see if anything has been reported? If you don't find anything, double check your config against the doc, and file a bug report.
_________________
Quis separabit? Quo animo?