script firewall

script firewall

[Luis GUSTAVO]

[-- Attachment #1: Type: text/plain, Size: 803 bytes --]

Hi,
 
i´m looking for a script for my adsl conection.
 
i found this
 
iptables -F
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
iptables -A OUTPUT -p tcp --dport 53 -j ACCEPT

 
when i apllyed this rules, my machines clients, don´t know acces my machine.
 
but it´s very complex and dificult.
 
 



Luis GUSTAVO         lgpcf@yahoo.com.br
+55 (21) 9891-3560    http://skafe.sites.uol.com.br
---------------------------------------------------------------------------------
 








---------------------------------
Yahoo! Messenger - Fale com seus amigos online. Instale agora!

[-- Attachment #2: Type: text/html, Size: 1482 bytes --]

Re: script firewall

[Antony Stone]

On Tuesday 13 April 2004 10:28 pm, Luis GUSTAVO wrote:

> Hi,
>
> i´m looking for a script for my adsl conection.

Er, that's not a very helpful description, but anyway...

> i found this
>
> iptables -F
> iptables -P INPUT DROP
> iptables -P OUTPUT DROP
> iptables -P FORWARD DROP
> iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> iptables -A OUTPUT -p tcp --dport 22 -j ACCEPT
> iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
> iptables -A OUTPUT -p tcp --dport 53 -j ACCEPT

Hmmm.   Looks like one of mine :)

> when i apllyed this rules, my machines clients, don´t know acces my
> machine.

I tell you what - you let us know what you'd like your firewall to do, and we 
might be able to help you.

If you don't tell us what your network setup is, and what you want your 
firewall to do for you, we might not be able to suggest the perfect ruleset 
for your needs.

I *did* say when I posted the above ruleset that it allowed me to access 
*from* the machine the rules were running on *to* other systems by SSH, and 
blocked *all access in to my machine*  (which is what I consider to be 
secure).

Therefore that fact that after you've applied these rules to your machine, 
your clients can't access the system, suggests that the ruleset is working 
correctly.

Tell us what you'd like to be different (and preferably tell us what you've 
tried yourself and had problems with) and we'll see what we can do to help.

Regards,

Antony

-- 
"640 kilobytes (of RAM) should be enough for anybody."

 - Bill Gates

                                                     Please reply to the list;
                                                           please don't CC me.

Re: script firewall -- munged to OT -- very OT

[Unknown, Alistair Tonner]

On April 13, 2004 06:02 pm, Antony Stone wrote:
> "640 kilobytes (of RAM) should be enough for anybody."
>
>  - Bill Gates
>
>                                                      Please reply to the
> list; please don't CC me.


	Antony -- I love yer sigs... And back then I was already cursing the bugger.

	(for what its worth, I was running DRDos at the time....)

Alistair Tonner

Re: script firewall -- munged to OT -- very OT

[Antony Stone]

On Wednesday 14 April 2004 12:23 am, Alistair Tonner wrote:

> On April 13, 2004 06:02 pm, Antony Stone wrote:
> > "640 kilobytes (of RAM) should be enough for anybody."
> >
> >  - Bill Gates
>
> 	Antony -- I love yer sigs... And back then I was already cursing the
> bugger.
>
> 	(for what its worth, I was running DRDos at the time....)

Thanks for the compliment.   And I'll bet now you run FreeDos and Wine :)  ?

Regards,

Antony.

-- 
Your work is both good and original.  Unfortunately the parts that are good 
aren't original, and the parts that are original aren't good.

 - Samuel Johnson

                                                     Please reply to the list;
                                                           please don't CC me.

Re: script firewall -- munged to OT -- very OT

[Unknown, Alistair Tonner]

On April 13, 2004 08:05 pm, Antony Stone wrote:
> On Wednesday 14 April 2004 12:23 am, Alistair Tonner wrote:
> > On April 13, 2004 06:02 pm, Antony Stone wrote:
> > > "640 kilobytes (of RAM) should be enough for anybody."
> > >
> > >  - Bill Gates
> >
> > 	Antony -- I love yer sigs... And back then I was already cursing the
> > bugger.
> >
> > 	(for what its worth, I was running DRDos at the time....)
>
> Thanks for the compliment.   And I'll bet now you run FreeDos and Wine :) 
> ?
>
	Slackware or Gentoo 2.6.3 winex 3.3.1
	(with vmware lurking about at work)

> Regards,
>
> Antony.