| Noway2 |
04-22-2013 08:21 AM |
Honestly, the absolute best thing you can do is to use IPTables directly instead of UFW, Firestarter, or another front end. The syntax, though slightly cryptic at first, is rather simple. Here is a link to an introductory iptables tutorial, though there are plenty more to choose from.
In your case, I would recommend setting the default policy to accept, so that when the firewall rules get cleared, it defaults to allowing you access. Remember that, unlike Windows, Linux does not keep ports open by default, meaning a firewall is a secondary layer of security rather than a must have to prevent intrusion.
Iptables rules are pretty straightforward. For example, in your case something like the following would work:
Code:
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp --dport (ssh) -j ACCEPT
-A INPUT -j DROP
This will allow only those three services you mention, and drop all others. Note that the order of the rules is important. If a rule match is made, checking will stop. Consequently, if you do something like place the drop rule first, no traffic will be allowed. |
