Firewall on stand-alone linux box

Firewall on stand-alone linux box

Post by T. Michael Wood » Tue, 19 Oct 1999 04:00:00



I am running RH6.0 on an intel box and want to configure a firewall for
my system.  I connect to the internet via a one way cable modem for
downloading and a PPP dial up connection for uploads.  Can anyone direct
me to documentation or scripts for this configuration.  Thanks.

M. Woods

 
 
 

Firewall on stand-alone linux box

Post by moderato » Wed, 20 Oct 1999 04:00:00



> I am running RH6.0 on an intel box and want to configure a firewall for
> my system.  I connect to the internet via a one way cable modem for
> downloading and a PPP dial up connection for uploads.  Can anyone direct
> me to documentation or scripts for this configuration.  Thanks.

> M. Woods

ipchains can handle that. Look for something like
"ipchains-1.3.8.tar.gz" in tarball format; the RH site probably has an
RPM format available for download. The HOWTO in the documentation will
tell you just about anything you need to know about how to implement it.

It lets you set policy for input, output, etc. You can then chain rules
together to accept or deny access by protocol, port number, interface,
etc. In other words, you can set a policy to deny all input (incoming
connections from the 'net), then add a rule to the input chain that says
if the input is coming to port 80 (http), accept it. That would allow
foreign browsers to connect to your web server, but telnet and ftp
connections would be denied.

--
Hogarth

Please remove **nospam** from email address to reply

 
 
 

1. sendmail on a stand-alone Linux box with PPP connection

Hi,

I have a stand-alone Linux system and from tine to time I dialup to my PPP
account to download new mail and news. The sendmail.cf which I am using now
allows me to send mail to localhost with or without PPP connection. Mail for
remote sites is returned with an error 'Nameserver: unrecoverable error'
when there is no PPP connection; it is sent when the PPP connection is up
and the name server of the site maintaining my PPP account is available.
What I plan is to

* dialup
* download all new mail via pop or something similiar
* hangup
* answer and send all mail (the mail should get queued)
* dialup
* do a sendmail -q

In sendmail.cf I have not insisted on using BIND, because I have no name
server running locally and insisting on BIND would return all mail to
localhost as undeliverable. As I said, mail to a remote site is returned as
undeliverable when the name server is not available. I gets queued when I
add the remote site to /etc/hosts, but this is braindead. Obviously,
sendmail thinks that if the name server is not available and the remote site
is not listed in /etc/hosts there will never ever be a chance to deliver the
mail.

Maybe someone has an appropriate sendmail.cf available that does the simple job.
I really would appreciate some help because I saw the O'Reilly book.

With kind regards,
Michael Marte

PS. I'm using sendmail 8.6.12.

2. AIX Connections for AIX 4.3

3. Query : Need to download files of old stand-alone UNIX box

4. using multiple copies of gcc

5. Setting up a stand-alone dial-in box

6. permuted index

7. What is the best firewall for a stand-alone machine?

8. default gateway file

9. How to create stand-alone application using linux kernel sources?

10. Permissons on stand-alone linux

11. Linux stand-alone boot

12. Networked stand-alone Linux info wanted, HELP !!!

13. ANNOUNCE: sash (stand-alone shell) for Linux