LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (http://www.linuxquestions.org/questions/linux-security-4/)
-   -   Linux Firewall Senior Project (http://www.linuxquestions.org/questions/linux-security-4/linux-firewall-senior-project-191979/)

evalastin 06-10-2004 01:20 PM

Linux Firewall Senior Project
 
I'm on a project to build a firewall using Linux and I really don't know where to start after installing the Linux OS. please I could use some guidance.

It's a firewall with 4 interfaces, one 4 d internet, one 4 a DMZ providing only http and https and 2 for 2 internal LANs. Also it will require DHCP. Anyone willing to walk me through?

I'll be glad with as much help as I can get

ugob 06-10-2004 10:07 PM

This is a serious task that no automated tool can do (to my knowledge). You should read all the doc about iptables/netfilter and maybe shorewall as well.

http://www.netfilter.org/

http://www.shorewall.net/

king_nothingzzz 06-12-2004 08:59 AM

There is this excellent book, which covers almost every aspect (for beginners) of Internet Firewalls

Check it out, if u can..

Building Internet Firewalls (2nd Edition)
by Authors: Elizabeth D. Zwicky , Simon Cooper , D. Brent Chapman

Good Luck...

king_nothingzzz

evalastin 06-14-2004 02:32 PM

Started senior proj, more advice pls
 
Just started my senior project. I'm configuring a 4-interface firewall, 1 for d dmz, one 4 d internet connection and 2 for 2 internal networks. D dmz will house just a web server. d firewall is meant to provide only http and https. as a newbie, i'll need some reccomendations of iptable rules apart from d default deny.

Any suggestions?

Capt_Caveman 06-14-2004 03:08 PM

As this is your project, I would imagine that reading the iptables/netfilter documentation would be the best place to start in order to design/write your own firewall. Here are some good places to begin:

http://www.netfilter.org/documentati...entation-howto
http://iptables-tutorial.frozentux.net/
http://www.linuxvoodoo.com/resources...bles-tutorial/
http://www.linuxquestions.org/questi...579#post222579
the iptables man page

After reading through the docs., you should be able to put together at least some of the script by yourself, then if you have any specific questions, someone can likely help you out. If you were looking for someone to write a script for you, then you came to the wrong place.

/Moderator Note: I'm merging this thread with your original one.


All times are GMT -5. The time now is 10:07 PM.