Hi,
I am using Fedora on my desktop pc. I want to know how can i protact my PC from outside world. What firewall policy should i implement in iptables to keep it more secure.
thanks
mypass

Fedora has a built in firewall application that's just called "Firewall". If you're using Gnome you can click on System->Administration->Firewall. Basically you want to enable the firewall, and not have any open incoming ports. You can then begin to open ports as they are necessary, and make notes somewhere about the ports you open and why you opened them. I don't remember if the Fedora firewall application has an option for putting notes on specific rules, but if it doesn't just make a text file somewhere to remind you about why you opened certain ports. To test your current firewall settings you can use Zenmap on a 2nd computer on the same network to scan your desktop PC and it will reveal any open ports you have. I recommend doing this occasionally anyway, even after you set up your firewall, to make sure you don't have any open ports that don't need to be open any more, and to make sure that nothing has made any modifications to your firewall settings without your knowledge.

thanks for your reply. well as you mention to use Zenmap which is a GUI utility,Just for my knowledge is any version of Zenmap or any other utility which i can use in terminal.
I some time use my desktop pc on runlevel 3 bcz in GUI my pc goes too much slow.

Zenmap is just a GUI frontend for nmap, so you can just use nmap from the command line to get the exact same results that you would get from using zenmap. For usage just do nmap --help

You should also realize that there is a lot more to security than just a firewall. You can shut down unused services, make sure your machine is regularly updated and patched, maybe even install a file monitor like Aide or Samhain.

Please visit the Security forum and have a look at the stickied thread on ways to secure your machine.

1 members found this post helpful.

Moved: This thread is more suitable in "Linux - Security" and has been moved accordingly to help your thread/question get the exposure it deserves.

1 members found this post helpful.