Question about MNF
 

Hi, newbie here. I have managed to successfully installed Mandrake Network Firewall on an old pc. It works! Hurrah! But i got two question about the MNF,

1. Under Firewall Rules -> Default Policies, I have set accept for the following scenario
-lan (client) to all (server)
-fw (client) to all (server)
-wan (client) to all (server)

my question is, is my configuration correct? Did I mis-accept anything?

2. In MNF, I wanted to block certain port ( chatting ). I have identified the port that the chat program uses, but can anyone teach me how to configure the MNF to perform port blocking? I heard it has something to do with iptables, but since I am in a n00b in linux, I really dont know what to do....



Thanks for reading anyways!

I'm not really that familiar with MNF, but I don't believe you want to set you default WAN -> ALL to be ACCEPT. WAN represents the entire internet, so having an accept default is opening up your entire LAN to anyone on the internet. I believe you want to have a more restrictive default policy and then specifically allow only the ports you want through (like www or mail). I believe these rules are added in the "Rules" submenu of the MNF configuration wizard. You can do port blocking in the same section of the menu, but instead of adding a rule to allow incoming (WAN -> LAN) traffic, you would block the specific chart ports on all outgoing (LAN -> WAN) traffic.

If you haven't already read the MNF manual, it probably will help alot. Specifically this page has detailed info on adding specific rules:
http://doc.mandrivalinux.com/Mandrak...l/ch06s05.html