LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-25-2003, 08:43 PM   #1
MaverickApollo
Member
 
Registered: Oct 2003
Distribution: Debian
Posts: 57

Rep: Reputation: 15
iptabes


I am trying to secure a interface that is attached to my system, eth1.

I have tried to use the command iptables -A INPUT -i eth1 -p tcp --syn -j DROP

But that just kills all TCP communication on both interfaces, eth0
and eth1.

Does anyone have any idea on how to leave eth0 completly open, but not
have any communication on eth1. The reason I want to do this is that
eth1 is connected to the DMZ on my router and has snort listening
there. the machine is'nt acting as a gateway, it is just a server running snort on eth1, which is its only task on eth1, eth0 is the main interface connected to the router.
 
Old 12-26-2003, 12:46 AM   #2
stuNNed
Member
 
Registered: Aug 2003
Distribution: Gentoo/Ubuntu
Posts: 134

Rep: Reputation: 15
check out firestarter for simple setup of iptables. there are quite few good iptables guides and howtos online, find a firewall script you can model yours on.
 
Old 12-27-2003, 01:37 AM   #3
DavidPhillips
LQ Guru
 
Registered: Jun 2001
Location: South Alabama
Distribution: Fedora / RedHat / SuSE
Posts: 7,163

Rep: Reputation: 58
RedHat has a very simple to use program called lokkit

This will allow you to do anything with your current setup with the exception of running servers. If you have a server running you need to use custom settings and select the server type. You can choose interfaces to firewall or trust, configure for dhcp, and dns.

lokkit can be run from the command line also. Just tab over to ok and hit enter.

Note: it will only allow your current dns server to work. If the dns settings change as in using multiple isp's then after connecting you need to run lokkit again to update the dns settings.

If you use the Network Device Control application which uses the ifup scripts to setup your connection it will configure your firewall for dns each time you connect.

Last edited by DavidPhillips; 12-27-2003 at 01:40 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
iptabes help juanb Linux - Networking 3 10-13-2005 11:36 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:44 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration