LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 04-06-2017, 07:28 PM   #1
taylorkh
Senior Member
 
Registered: Jul 2006
Location: North Carolina
Distribution: CentOS 6, CentOS 7 (with Mate), Ubuntu 16.04 Mate
Posts: 2,127

Rep: Reputation: 174Reputation: 174
Recipe for home network firewall?


I have a Dell Inspiron 3050 Micro (NUC sized box) running CentOS 7.3 and serving as a DHCP server for my home LAN and as a central connection through which I route all traffic to a VPN using OpenVPN. At the moment my setup looks like this:

DSL modem <-Ehternet-> Netgear Router <-WiFi-> Inspiron <-Ehernet-> LAN (switch)

I am running through the Netgear as the Inspiron has only one wired NIC. I just obtained a USB to NIC adapter so I can eliminate the Netgear. But first I would like to build a reasonably comprehensive firewall on the Inspiron.

Does anyone have a canned recipe to serve as a starting point to build a home firewall?

TIA,

Ken
 
Old 04-06-2017, 09:39 PM   #2
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,237
Blog Entries: 28

Rep: Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116
Linux comes with firewall capability in the kernel. It's called iptables.

You can either configure iptables from the command line or get a frontend for it. Ufw is in the repos. There is a gui frontend for ufw called gufw, which I quite like, but it doesn't appear to be in the CentOS repos.

A search for "firewall CentOS" will turn up more options.
 
1 members found this post helpful.
Old 04-06-2017, 09:51 PM   #3
taylorkh
Senior Member
 
Registered: Jul 2006
Location: North Carolina
Distribution: CentOS 6, CentOS 7 (with Mate), Ubuntu 16.04 Mate
Posts: 2,127

Original Poster
Rep: Reputation: 174Reputation: 174
Thank you frankbell,

The page you reference looks like a great stating point. I have used gufw in the past - perhaps on Ubutu. At least now I have a starting list of WHAT to block/allow etc. I can figure out the HOW.

Ken
 
Old 04-06-2017, 10:06 PM   #4
michaelk
Moderator
 
Registered: Aug 2002
Posts: 25,524

Rep: Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843
CentOS 7 uses firewalld which has a GUI tool firewall-config. I have not tried to configure a NAT/router using firewalld yet. You can always disable it and go back to using iptables since you might find more information with the old style rule sets.
 
2 members found this post helpful.
Old 04-06-2017, 10:20 PM   #5
taylorkh
Senior Member
 
Registered: Jul 2006
Location: North Carolina
Distribution: CentOS 6, CentOS 7 (with Mate), Ubuntu 16.04 Mate
Posts: 2,127

Original Poster
Rep: Reputation: 174Reputation: 174
Thanks michaelk,

I have played with the GUI tool but I do not really understand how something there relates to something in iptables. A good opportunity for me to do some learning.

Ken
 
Old 04-07-2017, 05:51 AM   #6
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
LHN?
 
2 members found this post helpful.
Old 04-07-2017, 08:27 AM   #7
taylorkh
Senior Member
 
Registered: Jul 2006
Location: North Carolina
Distribution: CentOS 6, CentOS 7 (with Mate), Ubuntu 16.04 Mate
Posts: 2,127

Original Poster
Rep: Reputation: 174Reputation: 174
Thanks Habitual,

Looks to be an EXCELLENT resource!

Ken
 
Old 04-07-2017, 12:01 PM   #8
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
de nachos. Glad you like it.
 
Old 04-07-2017, 08:42 PM   #9
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,237
Blog Entries: 28

Rep: Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116Reputation: 6116
michaelk, thanks for pointing me to system-config-firewall. I just set it up in this here VM and learned something.
 
Old 04-07-2017, 08:44 PM   #10
jefro
Moderator
 
Registered: Mar 2008
Posts: 21,895

Rep: Reputation: 3616Reputation: 3616Reputation: 3616Reputation: 3616Reputation: 3616Reputation: 3616Reputation: 3616Reputation: 3616Reputation: 3616Reputation: 3616Reputation: 3616
I might be tempted to run Untangle linux on it instead of Centos. You might be able to manage a VM with a firewall distro on it too if you have DSL.

I was going to put a small nuc type like that in my system but still looking at buying a pfsense arm box. Still on the fence if it can run snort.
 
Old 04-15-2017, 12:13 AM   #11
Ztcoracat
LQ Guru
 
Registered: Dec 2011
Distribution: Slackware, MX 18
Posts: 9,484
Blog Entries: 15

Rep: Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176
Quote:
Originally Posted by michaelk View Post
CentOS 7 uses firewalld which has a GUI tool firewall-config. I have not tried to configure a NAT/router using firewalld yet. You can always disable it and go back to using iptables since you might find more information with the old style rule sets.
I looked up firewalld. A few searches said that it's in the repos for most distributions.

Did firewalld come with a fresh installation of CentOS 7?
 
Old 04-15-2017, 04:41 AM   #12
michaelk
Moderator
 
Registered: Aug 2002
Posts: 25,524

Rep: Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843Reputation: 5843
Yes, it is automatically installed on Centos 7
 
Old 04-15-2017, 02:40 PM   #13
Ztcoracat
LQ Guru
 
Registered: Dec 2011
Distribution: Slackware, MX 18
Posts: 9,484
Blog Entries: 15

Rep: Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176Reputation: 1176
Quote:
Originally Posted by michaelk View Post
Yes, it is automatically installed on Centos 7
Thanks fo the confirmation.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Firewall your home network with a Raspberry Pi LXer Syndicated Linux News 0 03-15-2016 08:31 AM
simple recipe to connect to my home server - debian - ubuntu Denis Gaulin Linux - Server 2 01-11-2016 11:53 AM
[SOLVED] Is it possible for the firewall to block access to my home network? sicisi Linux - Newbie 3 11-01-2011 12:37 PM
Home network setup with network firewall/router Gates1026 Linux - Networking 4 01-17-2005 09:26 PM
How to Setup Firewall for home network julesbrat Linux - Networking 1 05-19-2002 04:17 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 02:36 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration