I have a small, simple firewall "script": http://pastebin.com/raw.php?i=NChRyqVu
Can I ask the mailing list, that look at it for a few moments, and sort out
the:
- unnecessary things in it [if it contains any, like are there solutions for
write multiple destination ip's in one line?]
- missing thing, that could be in a firewall, to make it _SAFER/BETTER_!
TODO's/Q's [please help!]:
1) where do i have to put the "iptables-restore FROMTHEFILE" command [to set
the firewall when e.g.: booting the pc] on Fedora?
2) what is the best application firewall under linux? [links for good howtos?]
3) do i need a proxy? [i can guess that, that the http proxy on localhost can
filter the http, but what's with https? it's end-to-end encrypted :O]
4) can i do something with the: "$IPTABLES -A INPUT -p tcp --dport 20000 -j
ACCEPT" - i'm seeding distros on torrent, but are there any plus "options" to
e.g.: only allow torrent traffic on port 20000/input?
5) on line 68: "$IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j
ACCEPT" - when i put a "-p tcp" in it, it makes "funny" things - when i reopen
my webbrowser, i "can't surf the net", so i can't put the "-p tcp" in it? :( -
just to ensure only tcp comes IN. [why would i need anything else?? only OUTPUT
udp needed, no? :O + icmp ping output..]
6) "is it safer", if i use a local dns cache? like "dnsmasq"?
7) what does exactly "--state ESTABLISHED,RELATED" mean? why do i have to write
this to the start of my firewall script?
8) how could i block packets from: destinatio ip 255.255.255.255?? "$IPTABLES
-A INPUT -d 255.255.255.255 -j DROP" to the start of my script DOESN'T help :O
i used wireshark to get this info.. the broadcast package was my routeros
router.
sorry if i ask to much :\ but i need these answers :\ [and at least it would be
archived]
THANK YOU for any help regarding these things!
--
users mailing list
[email protected]
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
