Firewall suggestions

[Tom H]

On Mon, Mar 9, 2015 at 7:06 AM, Petter Adsen <petter at synth.no> wrote:
>
> I have a hosted VM with a provider, which I've set up mainly as a
> private mail server. It needs to be protected by some sort of firewall,
> but there are several to choose from, apart from just writing rules for
> iptables by hand. I don't think I'll be needing an extreme amount of
> rules.
>
> Writing rules for iptables is not something I've done in many years, so
> I was wondering about using either ufw, shorewall or ferm. Has anyone
> got any experience with either of these? I'm looking for something that
> is easy to set up and maintain. A pointer to a good guide on any of
> these would also be much appreciated, especially one that centers on
> protecting a machine that doesn't serve as a firewall for an entire
> network, it only has the one interface.

I usually just use iptables but I've have to deal at two different
sites with ufw and shorewall but 1,000 others who've had the same
experience might tell you that they prefer shorewall.

I'd suggest that you set up VMs to set up the rules that you'd like to
have on your mail server and find the one with which you feel most
comfortable.

You could try ufw and shorewall as well as apf-firewall and
arno-iptables-firewall.