Linux firewall

cain

Banned
Aug 1, 2003
2,512
0
0
i just did a hd install of knoppix and wonder if there is a firewall that comes a long with it. i am nwe to linux so i know nothing about it. please help.
 

Farfrael

Senior member
Mar 6, 2002
312
0
0
i can recommand www.shorewall.net to get you started with firewalling in Linux.
Once you become good/understand what you are doing, you can have fun making your own iptables rules/scripts :)

 

Need4Speed

Diamond Member
Dec 27, 1999
5,383
0
0
Originally posted by: Farfrael
i can recommand www.shorewall.net to get you started with firewalling in Linux.
Once you become good/understand what you are doing, you can have fun making your own iptables rules/scripts :)

good choice...shorewall is excellent. its simple to install and simple to config...plut Tom does a great job of maintaining it
 

cain

Banned
Aug 1, 2003
2,512
0
0
i dled the newest version of shorewall, which is 1.4.10a the rpm, but when i tried to install it, i got this:
error: cannot open Packages index using db3 - No such file or directory (2)
error: cannot open Packages database in /var/lib/rpm
 

Farfrael

Senior member
Mar 6, 2002
312
0
0
don't think rpms will work on a Knoppix distribution
find the appropriate package for your distribution on the shorewall site
 

Flatline

Golden Member
Jun 28, 2001
1,248
0
0
If you're using Knoppix, then the rpm would probably give you problems. Open a console, su and then run "apt-get install shorewall". That should take care of any dependencies.
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
So shorewall isn't a firewall? It's just a configuration utility for Netfilter, aka IPTables...
 

Flatline

Golden Member
Jun 28, 2001
1,248
0
0
There is also a page on the shorewall site that will let you download example files for the configuration (although as always, you would learn more setting it up by hand) HERE

you extract the files, and then overwrite the config files in /etc/shorewall. You also have to edit the /etc/defaults/shorewall (I think that's the right location) file to allow shorewall to start. I can't remember if you have to switch a 0 to a 1 or vice-versa, but it's documented in the file for you.

Hope this helps!
 

Flatline

Golden Member
Jun 28, 2001
1,248
0
0
n0c, it just makes setting up iptables a bit more user-friendly (although, of course, if you know iptables well you would find it a bit cumbersome.
 

cain

Banned
Aug 1, 2003
2,512
0
0
man it sucks how linux is the more efficient operating system but i have no idea how to use it. even with the gui.
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Originally posted by: Reon
man it sucks how linux is the more efficient operating system but i have no idea how to use it. even with the gui.

It takes a little while, but with practice it becomes easier and easier. Windows no longer makes sense to me.
 

Farfrael

Senior member
Mar 6, 2002
312
0
0
Originally posted by: Bloodstein
How'z shorewall different from lokkit?? Not that I've used lokkit...

Well ...if even YOU didn't try "lokkit", how are WE supposed to know ? :)

After googling for it, lokkit seems to be a pretty simple GUI used by Gnome to create basic Iptables rules

" GNOME Lokkit allows you to configure firewall settings for an average user by constructing basic iptables networking rules. Instead of having to write the rules, this program asks you a series of questions about how you use your system and then writes it for you in the file /etc/sysconfig/iptables.

You should not try to use GNOME Lokkit to generate complex firewall rules. It is intended for average users who want to protect themselves while using a modem, cable, or DSL Internet connection. To configure specific firewall rules, refer to the Firewalling with iptables chapter in the Official Red Hat Linux Reference Guide. "

Shorewall is not a GUI, it is just a set of different rules stored in different text files ... It allows you to do anything you can do with Iptables but in an easier way.
 

Nothinman

Elite Member
Sep 14, 2001
30,672
0
0
iptables is the command-line interface to the network filtering in the Linux kernel, all the Linux firewall tools are just frontends to iptables.
 

Bloodstein

Senior member
Nov 8, 2002
343
0
0
Makez much more sense....

If I'm not mistaken lokkit is part of the red hat distribution.....but I think I'm gonna give shorewall a shot sometime this weekend.
 

cain

Banned
Aug 1, 2003
2,512
0
0
Originally posted by: Flatline
If you're using Knoppix, then the rpm would probably give you problems. Open a console, su and then run "apt-get install shorewall". That should take care of any dependencies.

its weird, it says it can't find the package shorewall
 

drag

Elite Member
Jul 4, 2002
8,708
0
0
Originally posted by: Reon
Originally posted by: Flatline
If you're using Knoppix, then the rpm would probably give you problems. Open a console, su and then run "apt-get install shorewall". That should take care of any dependencies.

its weird, it says it can't find the package shorewall

Look for it in dselect. Maybe the package is named slightly different. Also it may not be aviable from the default knoppix source list. You may have to add a debian one to get it. Just guessing
 

drag

Elite Member
Jul 4, 2002
8,708
0
0
Originally posted by: Reon
i ran dselect, but no window came up...

dselect is suppose to be run from a command line.

you need to have a shell terminal open to run this stuff. Knoppix is fundamentally a modified version of Debian and uses apt-get for a package manager. Dselect is a ncurses based front end for it. If you want a gui based front end for X windows you can install a program called synaptic and that will give you a nice and pretty interface to use.


Check out here if your new to Debian (or in this case knoppix)

It will give you tips and howtos on apt and various other aspects that you can use. Knowing this stuff makes things much easier to deal with.