how to make an effective firewall with iptables

jonc · 12-08-2004, 08:24 PM

would you guys say this is an effective firewall script,

iptables -F
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -i eth0 -j DROP

jlangelier · 12-08-2004, 10:18 PM

Quote:

would you guys say this is an effective firewall script,

No, you need a whole lot more stuff. I'd go to:

http://linux-firewall-tools.com/linu...all/index.html

...where you answer a bunch of questions, and it writes an IPTABLES or IPCHAINS firewall for you. Then you'll see what you're missing.

Sadly, you now need to ask the author for a password, but it's free.

But personally, I'd use IPCHAINS. It looks like you're not intending to do anything which would require IPTABLES, and IPCHAINS is simpler to configure.

Butt-Ugly · 12-08-2004, 10:28 PM

This may also help..

http://www.brennan.id.au/06-Firewall_Concepts.html

BU.

scuzzman · 12-08-2004, 11:44 PM

My reccomendation would be to download a GUI frontend for iptables, specifically GuardDog. It works great and is very effective.