FC3 firewall

paulr1984 · 04-25-2005, 10:38 PM

I'm trying to secure my fedora core 3. I'd like to ask your opinion on the built-in firewall in FC3. Is it good enough for mission-critical servers? Where does it log intrusions and does it alert the user everytime there is one?

I'm looking for an open-source solution. I understand that PCX Firewall and Shorewall are just front-ends to netfilter. So is netfilter the best solution?

mrcheeks · 04-25-2005, 10:58 PM

shorewall is a good firewall . i have used it on a production server and i have been happy with it. firehol is not bad too.
personally, if you are talking about the firewall gui of redhat/fedora, i find it "ok"...that's it.

paulr1984 · 04-26-2005, 01:12 AM

ic. I'll give shorewall a try. Anyway, does the default firewall in FC3 log (or even alert the user for) intrusions? If yes, where does it log them?

masand · 04-26-2005, 01:40 AM

hi there
shorewall is not a firewall

the firewall is iptables which is installed by default,shorewall uses iptables
shorewall is an interface whcih generates the iptables scripts easily

and when u configure shorewall u can set the logging options

regards

paulr1984 · 04-28-2005, 05:09 AM

I'm confused. Is fedora core 3 using ipchains or netfilter or iptables?

Skyline · 04-28-2005, 06:54 AM

Quote:

Originally posted by paulr1984
I'm confused. Is fedora core 3 using ipchains or netfilter or iptables?

Think of iptables as an "interface" or a "tool" to configure Netfilter - so on FC3 you can use iptables or an iptables front-end to configure Netfilter

masand · 04-28-2005, 07:00 AM

iptables.........

try

rpm -qa|grep iptables