Can't get on internet when firewall activated in Xandros

figfighter · 06-06-2005, 10:01 PM

I noticed under internet in Xandros that there was a Firewall Wizard. When I run it (and activate the firewall) I can't get an internet connection. I'm using a cable connection through a hub. If I turn the firewall off, I get online just fine.

Anyway, does this mean I am not running any kind of firewall? How neccessary is a firewall when using Xandros as Linux is supposed to be designed to be secure? Lastly how do I setup the firewall to work?

qwijibow · 06-06-2005, 11:33 PM

for a home computer, nnot running any web servers, a simple firewall will do.

i use

Code:

iptables -F INPUT
iptables -F OUTPUT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -P INPUT DROP
iptables -P OUPUT DROP

this firewall allows any outgoing connections, and drops all incomming connection attempts.

then you just need to poke a few holes for anything that needs to accept new connections like maybe for multiplayer game servers like UT-2004 with c rule like

Code:

iptables -A INPUT -p tcp --dport <ut2004-port> -m state --state NEW -j ACCEPT

what firewall rules are you using ?
run iptables -vL when the firewall is running and post output here.

figfighter · 06-07-2005, 08:28 PM

apologies for my ignorance...

i logged in the console using root (i assume i have to use the root, correct?)...

typed in iptables -vL

this is what came up:

Ummmm...

Is there an easy way to post that info... like how other people do with the grey box? =(

figfighter · 06-07-2005, 08:52 PM

NEVERMIND! i figured it out...

this is what it says when i type iptables -vL:

Chain INPUT (policy ACCEPT 1707 packets, 1295K bytes)
pkts bytes target prot opt in out source destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 1624 packets, 380K bytes)
pkts bytes target prot opt in out source destination

What does this mean?

(P.S. i still want to know how pwople post their code in a box)

qwijibow · 06-08-2005, 08:52 AM

to begin a code block put the word code in square brackets. like [ code ] without the spaces.
to end a code block put /code in square brackets.

That output means you have no firewall rules for incomming packets.
No rules for forwarding packets, and No rules four outgoing packets.

in other wise un-restricted netwok, firewall is not doing anything.

did you remember ot start the firewall before running iptables -vL ?

if you star your firewall, then run post the iptbales output, we should be able to find out whats wrong.

i am guessing you are accidently restricing web browser output...
or the input is not correctly handling what we call RELATED / ESTABLISHED traffic.

Anyway, to answer your first question... running a firewall is not needed unless you run a server of some kind, but most poeple turn it on anyway, just in case.

jonlake · 06-08-2005, 08:52 AM

There is a Code button at the top of this page, in the vB Code section.
or you can put it in yourself:

[ CODE ]
Type your code here. Omit the space from the brackets.
[ /CODE ]