Re: simple stand-alone firewall

2012-04-02 Thread Arnt Karlsen
On Fri, 30 Mar 2012 22:48:18 +0400, wlan wrote in message CAP=r6j15mdjdkojhf+2qnvh39vwegyesy_moqvb2p3c4sod...@mail.gmail.com: 2012/3/30 Russell L. Harris rlhar...@broadcaster.org * Russell L. Harris rlhar...@broadcaster.org [120324 07:15]: From the standpoint of protection of a LAN (two

Re: simple stand-alone firewall

2012-03-30 Thread Russell L. Harris
* Russell L. Harris rlhar...@broadcaster.org [120324 07:15]: From the standpoint of protection of a LAN (two or three machines) for a home or home office... ... Is there a good firewall application in Debian which provides a secure default configuration? Or must I learn how to configure a

Re: simple stand-alone firewall

2012-03-30 Thread wlan
I think netfilter are better firewall, you can read documentation from iptables. It's really cool. =) 2012/3/30 Russell L. Harris rlhar...@broadcaster.org * Russell L. Harris rlhar...@broadcaster.org [120324 07:15]: From the standpoint of protection of a LAN (two or three machines) for a

Re: simple stand-alone firewall

2012-03-27 Thread Curt
On 2012-03-24, Charles Kroeger ckro...@frankensteinface.com wrote: You won't get a 'stealth' rating at grc. Shorewall seems to leave port 0 That's all hooey anyway, that stealth business, as if you're some kind of combat aircraft over an Iranian nuclear installation or something, prospect which

Re: simple stand-alone firewall

2012-03-26 Thread Celejar
On Sat, 24 Mar 2012 12:17:50 + Chris Davies chris-use...@roaima.co.uk wrote: Russell L. Harris rlhar...@broadcaster.org wrote: From the standpoint of protection of a LAN (two or three machines) for a home or home office, how effective is a firmware-based firewall/router in comparison

Re: simple stand-alone firewall

2012-03-26 Thread Andrei POPESCU
On Sb, 24 mar 12, 11:16:08, Charles Kroeger wrote: You won't get a 'stealth' rating at grc. Shorewall seems to leave port 0 visible but closed. I don't know why this is but would be interested to know if someone on this list knew the reason. Port 0? I haven't used Shorewall in a while, but

simple stand-alone firewall

2012-03-24 Thread Russell L. Harris
From the standpoint of protection of a LAN (two or three machines) for a home or home office, how effective is a firmware-based firewall/router in comparison with a software-based stand-alone firewall/router? Is either significantly better than the other? I am thinking in terms of devoting an

Re: simple stand-alone firewall

2012-03-24 Thread CamaleĆ³n
On Sat, 24 Mar 2012 07:02:42 +, Russell L. Harris wrote: From the standpoint of protection of a LAN (two or three machines) for a home or home office, how effective is a firmware-based firewall/router in comparison with a software-based stand-alone firewall/router? I'd say even the SPI

Re: simple stand-alone firewall

2012-03-24 Thread Mika Suomalainen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I use UFW as firewall on all computers at home. It's very easy to configure. UFW (package ufw) can be found from Debian repositories. For documentation see https://help.ubuntu.com/community/UFW . There is also graphical user interface called

Re: simple stand-alone firewall

2012-03-24 Thread green
Russell L. Harris wrote at 2012-03-24 02:02 -0500: Is there a good firewall application in Debian which provides a secure default configuration? Or must I learn how to configure a firewall? Hopefully you are able to find something simple to use, but if you do learn how to configure a

Re: simple stand-alone firewall

2012-03-24 Thread Chris Davies
Russell L. Harris rlhar...@broadcaster.org wrote: From the standpoint of protection of a LAN (two or three machines) for a home or home office, how effective is a firmware-based firewall/router in comparison with a software-based stand-alone firewall/router? Is either significantly better

Re: simple stand-alone firewall

2012-03-24 Thread Charles Kroeger
Is there a good firewall application in Debian which provides a secure default configuration? Or must I learn how to configure a firewall? The package: 'arno-iptables-firewall' will do that. You will have to tell it how you're connecting (e.g. eth0) but after that it will configure a 'default'

Re: simple stand-alone firewall

2012-03-24 Thread Steven Jan Springl
On Saturday 24 Mar 2012 16:16:08 Charles Kroeger wrote: You won't get a 'stealth' rating at grc. Shorewall seems to leave port 0 visible but closed. I don't know why this is but would be interested to know if someone on this list knew the reason. What is the deal with port 0? I have just