hi

im putting up iptables on a server using the default ruleset that comes when 
install ipmasq under debian woody.

now im wondering if that ruleset represents a strong firewall or what?
i want my internal network masqed, but no targets in the rulesset shows any 
masq activity?

heres the ruleset;

[EMAIL PROTECTED]:/home/maasha# iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
LOG        all  --  127.0.0.0/8          anywhere           LOG level warning
DROP       all  --  127.0.0.0/8          anywhere
ACCEPT     all  --  anywhere             255.255.255.255
ACCEPT     all  --  anywhere             homer
ACCEPT     all  --  anywhere             192.168.0.255
LOG        all  --  anywhere             anywhere           LOG level warning
DROP       all  --  anywhere             anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere           LOG level warning
DROP       all  --  anywhere             anywhere

Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             255.255.255.255
ACCEPT     all  --  homer                anywhere
ACCEPT     all  --  192.168.0.255        anywhere
LOG        all  --  anywhere             anywhere           LOG level warning
DROP       all  --  anywhere             anywhere

any suggestions on how to set up a strong firewall rule set will be appreciated!

regards

-martin

Reply via email to