server firewall?

Pentti Poytakangas · 02-20-2017, 06:00 AM

Hei!
I wodering.Server whith NAT (masquerade,fowarding and iptables).
Does that server iptables block incoming traffic for localnet?
Many people think yes it blocking.Are we right?

Thanks!

r3sistance · 02-20-2017, 06:16 AM

iptables will block anything if told too including localhost but without seeing your ruleset or knowing the distribution, it is hard to answer that question in regards to your set-up.

Turbocapitalist · 02-20-2017, 06:44 AM

Which distro, including version, are you asking about?

Regardless, the specifics would probably be found in the output of the iptables-save and ip6tables-save. Whether or not you show those here is up to you, but you'd need to work through the chains as an imaginary packet or three to see what will be blocked. Or you can just insert an extra rule right before the block which logs the packets to be blocked. That way you can see in the log what is really getting blocked and what is really getting let through.

jefro · 02-20-2017, 03:15 PM

You could use FirewallBuilder to make up any sort of firewall you wish. http://www.fwbuilder.org/

I'd be more inclined to make a dedicated firewall system running pfsense or untangle or such.

Wonder why LQ doesn't offer a pre-made template for users??? Might work on that as a feature here.