Re: iptables firewall, help.

2004-03-02 Thread Roberto Sanchez
John Hedge wrote: Brian, You might like to take a look at www.shorewall.net. It helped me when I was at a similar stage as it seems you may be. I agree. Shorewall has awesome documentation (like step-by-step) for most common situations. -Roberto signature.asc Description: OpenPGP digital signat

Re: iptables firewall, help.

2004-03-01 Thread John Hedge
Brian, You might like to take a look at www.shorewall.net. It helped me when I was at a similar stage as it seems you may be. Another idea is to join [EMAIL PROTECTED] John On Tue, 2004-03-02 at 17:53, Brian Schmidt wrote: > I'm trying to make a good firewall/gateway iptables script, this is

iptables firewall, help.

2004-03-01 Thread Brian Schmidt
I'm trying to make a good firewall/gateway iptables script, this is what I have so far but I would love input and ideas, as well as some help with a few features. Below is the script I've put together so far, hopefully this post could get a nice allround firewall/gateway iptables script made for

Re: iptables firewall help

2001-06-27 Thread Sebastiaan
Hello, a couple of weeks I found this link on debian-firewall: http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/adsl4linux/ADSL4Linux/ADS L4Linux/templates/firewall.iptables.devel?rev=HEAD&content-type=text/vnd .viewcvs-markup It is a pretty good script. You have to set y or n for a list of service

Re: iptables firewall help

2001-06-26 Thread john
Matt, I can't remember the exact URL, but somewhere in the IBM developer forums is a really good tutorial on using iptables to create a firewall. It includes some nice scripts, and is much clearer than Rusty's guides. John P Foster http://www.golden-orb.com Matthew Garman wrote: > I would like

iptables firewall help

2001-06-26 Thread Matthew Garman
I would like to upgrade my kernel from 2.2 to 2.4. The main thing that concerns me is building a new iptables-based firewall (as opposed to ipchains). I was using the TrinityOS firewall for ipchains. I read through it, somewhat, but basically accepted its security on blind faith. I figure that