Re: comments about lokkit default script

[Stephen Smoogen <smoogen@lanl.gov>]

Yes.. sorry I went too fast. If you had multiple computers sitting
behind the computer running iptables then the forward rule is used (EG
something like this:

[Computer 1] <->[switch]->[Netfilter Computer]<->[Earthlink]
[Computer 2] <-----^

In your case the rules below are secure.

[Netfilter computer] <-> [Earthlink]

On Fri, 2003-09-12 at 13:01, Faheem Mitha wrote:
> On Fri, 12 Sep 2003, Stephen Smoogen wrote:
> 
> >
> > Basically to understand the script a bit better you should look at how
> > the rules look in the table.
> >
> > iptables -nxvL
> >
> > should give you some output. If the default policies are to ACCEPT
> > things then what is happening is that you are accepting ALL outbound
> > traffic and very little inbound traffic. The newest
> > redhat-config-firewall in their rawhide has some changes to this, but I
> > have been doing custom firewalls for too long now to remember what they
> > are (I think they put in an ESTABLISHED,RELATED rule in now.)
> >
> > Are you forwarding traffic through your firewall or just using it as a
> > client. If you are using it as a client it is pretty ok and secure. If
> > you are using it as a forwarder you will probably want to make some
> > changes for interfaces to be semi-trusted.
> 
> I'm not sure what this means. The firewall is set up on my home computer's
> kernel, which is also the only computer I have, no LAN (I think they call
> it). As I understand it, all packets coming and going from my computer
> pass through this firewall. I don't think I am doing any forwarding. Is
> this done for other computers connected to the net through the firewall?
> 
>                                                                 Faheem.
-- 
Stephen John Smoogen		smoogen@lanl.gov
Los Alamos National Labrador  CCN-5 Sched 5/40  PH: 4-0645 (note new #)
Ta-03 SM-1498 MailStop B255 DP 10S  Los Alamos, NM 87545
-- So shines a good deed in a weary world. = Willy Wonka --