Linux firewall

[SpookyEddy]

Just got my Mandrake 7.1 install up & running, can anyone recommend a good firewall?

I'am connecting with a normal dial-up, so something relatively simple (like BID for win9x) would be ideal.

Thanks in advance

[smokin1]

Linux really doesn't need one, it's pretty well built in. Kill processes and services you don't need, and maybe look in to ipchains...

here (http://www.linux-firewall-tools.com/linux/firewall/index.html)
http://sysopt.earthweb.com/forum/smile.gif

[SpookyEddy]

Thanks for the reply.

I've allready stopped any unwanted services so I guess that should do the job.

[mourikise]

Hi,

Linux is indead pretty safe by itself. However, I strongly suggest that you should read the IPCHAINS How-to. There, you will gain enough knowledge on understanding the firewall concept and even built your own one. It won't be very difficult, it just needs a good stundy on the How-to, especially the 'A serious example' section. Even if you decide you don't need a firewall after all you can learn a lot about TCP/IP and IP filtering through this study.

[This message has been edited by mourikise (edited 10-31-2000).]

[bdog]

also put this in your /etc/hosts.deny file ALL:ALL Then specifically put what daemons that you want to have access to in the hosts.allow file. Note this doesn't replace a firewall, but it is an added security measure. Also look into installing portsentry. Search for it on freshmeat.net

[dsandez]

Linux, like UNIX is open to many many hakcables. You gotta tighten any linux or unix box down hard. TCP wrappers, /etc file patches, nvram root password are just a few. If you want it to be really secure, then you must go out and get a book on securing your Linux box. They arent bullet proof out of the box.

[DougM]

Linux Security for the Home Network
http://www.linuxgazette.com/issue46/pollman.html
Securing Linux: The First Steps
http://www.linuxgazette.com/issue47/lukas.html
Linux Firewall and Security Site
http://linux-firewall-tools.com/

Armoring Linux http://www.linuxnewbie.org/nhf/intel/security/armorlin.html