Firewall

[Dmitry Mityugov]

On 10/17/05, Timothy A. Holmes <tholmes at mcaschool.net> wrote:
>
> well to be honest, i need to learn more about firewalls, so i probably should go indepth, but for now im likely gonna just use firestarter just to get it done

In fact, it's pretty simple to use shorewall (and I believe it'll let
you do things that you can't do with firestarter). You just install
it, then go to http://www.shorewall.net/shorewall_quickstart_guide.htm
and fetch sample configuration files from it, then adapt them to your
needs like uncommenting "fw net accept" in /etc/shorewall/policy,
IP_FORWARDING=On, DISABLE_IPV6=No in /etc/shorewall/shorewall.conf if
you need a router like your other messages seem to indicate :-) , add
"ACCEPT loc fw" to /etc/shorewall/rules if you plan to install bind,
samba, or any other services for the local network on that machine,
change "startup" from 0 to 1 in /etc/default/shorewall - and AFAIK
that's all.

--
Dmitry Mityugov, St. Petersburg, Russia
I ignore all messages with confidentiality statements

"We live less by imagination than despite it" - Rockwell Kent, "N by E"