Re: Can someone recommend a good simple firewall script?

[Anthony DiSante <theant@nodivisions.com>]

/dev/rob0 wrote:
>>learn iptables yourself, fine; if not, look on freshmeat for
>>something better. Just about anything you might find is probably
>>better.
>>
>>At this time I don't have something specific I can recommend. Before
>>I learned iptables I used MonMotha's, but that's too complicated for
>>my liking.
> 
> I don't have time to go looking, but ISTM that many of today's crop of 
> questions was related to this poster's issue. They are probably not 
> really wanting to learn firewalling, they simply want to have a rule 
> set that works and is easy to manage.
> 
> Yes, I know there are things like firestarter which can generate 
> rulesets. But is there something non-GUI, and simple?

I'm not an expert with firewalls, but it seems to me that many people would 
be well-served by something even more basic than a simple ruleset-generator.

Two of the most common services anyone would want to offer are HTTP and SSH. 
  And many people are either directly connected to the internet (i.e. the PC 
has a public IP) or else are behind a hardware router (the PC has a private IP).

Let's further assume that in many/most cases, people in that situation (who 
want HTTP and SSH open) would want the system completely locked down otherwise.

Given those constraints, which I think would apply to many people in many 
situations, couldn't we ("we" meaning the experts, excluding myself here) 
just provide two static rulesets that would satisfy all these people?  One 
for the system with a public IP, and one for the system behind a router?

-Anthony DiSante
http://encodable.com/
http://nodivisions.com/