LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-08-2006, 02:00 AM   #1
Shishio-
LQ Newbie
 
Registered: Apr 2006
Distribution: Damn Small Linux
Posts: 2

Rep: Reputation: 0
Questions relating to Damn Small Linux.


I have a frugal install of the latest version of Damn Small Linux, and would like to know if there are any simple, easy to use and configure firewalls that do not require knowledge of iptables, or for your drive to be formatted.

Also, are there more intuitive GUIs for DSL that won't use up a lot of resources? (I have a Pentium II, 533 Mhz Processor, and 160 mb SDRAM if that helps.)

I know DSL already has a file management utility, but, being a retarded, unwilling slave to windows, I find it awkward and hard to get used to.

I tried to conduct a search on this before posting, but the search results would not load for some reason. My apologies.

Thank you for your time.
 
Old 04-08-2006, 03:55 AM   #2
Simon Bridge
LQ Guru
 
Registered: Oct 2003
Location: Waiheke NZ
Distribution: Ubuntu
Posts: 9,211

Rep: Reputation: 198Reputation: 198
This is a firewall that uses IPTables.
You don't need to know iptables to use it...
Put the following into a text file.
Edit the "definitions" section to match your system.
Make it executable. Execute it.
(There are more complex version if you have a specific issue - but basically this won't let anything through wot you don't ask for.)

Code:
# mdh firewall
# Jon "maddog" Hall 
#! /bin/sh

# Load appropriate modules.
modprobe ip_tables
modprobe ip_conntrack
modprobe ip_conntrack_ftp

# remove existing rules
iptables --flush
iptables -t nat --flush
iptables --delete_chain
iptables --zero

# Definitions
MYNET=192.168.23.0/24 # likely IPs for your LAN
LANFACE=eth0 # whatever network device you use for LAN (if any)
WEBFACE=ppp0 # will be whatever network device connects to the internet
# WEBIP=  # gateway IP, used for a dual-homed host

### Rules ###

# Set up a default DROP policy for the built-in chains.
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT DROP

# Allow unlimited traffic on the loopback interface.
iptables -A INPUT  -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT

# Allow only initiated traffic in
iptables -A INPUT -m state --state RELATED,EXISTING -j ACCEPT

# Allow SSH connections
iptables -A INPUT -t tcp -j ACCEPT -dport 22

# Allow IP Forwarding and use NAT for outgoing connections.
# (Only use for dual homed host acting as an internet gateway.)
# iptables -P FORWARD ACCEPT
# iptables -A POSTROUTING -t NAT -o $WEBFACE -j SNAT --to $WEBIP

# Allow network traffic through ethernet
iptables -A INPUT -i $LANFACE -s $MYNET -j ACCEPT

# Allow all traffic out
# Any other output rule should go /before/ this one
iptables -A OUTPUT -m state --state NEW,RELATED,EXISTING -j ACCEPT
The file manager in DSL is the text based fluxbox. There are graphical file managers available through DSL's tools. Take your pick.

Last edited by Simon Bridge; 04-08-2006 at 04:01 AM.
 
Old 04-08-2006, 08:36 AM   #3
adssse
Member
 
Registered: May 2005
Distribution: Ubuntu, Jolicloud
Posts: 136

Rep: Reputation: 15
Have you taken a look at the mydsl extension rcfirewall?
 
Old 04-08-2006, 12:55 PM   #4
Shishio-
LQ Newbie
 
Registered: Apr 2006
Distribution: Damn Small Linux
Posts: 2

Original Poster
Rep: Reputation: 0
How do I obtain the information I need for the definitions part of the script? I know my IP address, but I don't know how to get the other stuff. And how do I make the file executable?

As for Rcfirewall, I was under the impression that it required knowledge of iptables, which, I hate to admit, I don't understand.

Thanks for your help.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to use C in Damn Small Linux klyau Programming 2 01-19-2006 02:11 AM
Damn Small Linux Sapsucker Linux - Laptop and Netbook 20 07-01-2004 01:40 PM
General questions relating to KDE/mandrake linux mep]-[isto Linux - Newbie 6 11-12-2003 10:08 PM
Damn Small Linux Nasty Linux - Newbie 2 10-11-2003 12:07 AM
Damn Small Linux Gerardoj Linux - General 1 08-11-2003 05:59 AM


All times are GMT -5. The time now is 06:33 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration