LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-15-2007, 02:50 PM   #1
Valkyrie_of_valhalla
Member
 
Registered: Jan 2006
Location: Romania
Distribution: Suse 12.0, Slackware 12.1, Debian, Ubuntu, Gentoo
Posts: 301

Rep: Reputation: 30
Firewall GUI that can read and append to current configuration?


The problem with most firewall GUIs is that they rebuild the firewall from scratch, and, my current configuration being mostly ok, I wouldn't like to have to redo everything.
I'd like a program that can show me what is configured so far, and with wich I can add new rules (for iptables?).
I've tried with Firestarter, but there is no slackware package, and I tried compiling from source, and I am currently in the classic Linux dependency hell. Firestarter requires gconf, gconf requires a file ORBit-2.0.pc. now what is that? Couldn't find anything with google.

So, does anyone know of such a program?

PS, 2 more questions:
1. In wich file is the current iptables configuration stored? (if any)
2. How can I enable firewall activity logging? (or is it already on? nothing in my /var/log) I was hoping the firewall gui could do this.

Thanks for reading, and sorry for the newbie question.
Any info/suggestion is welcomed.
 
Old 04-15-2007, 03:21 PM   #2
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
The problem with most firewall GUIs is that they rebuild the firewall from scratch, and, my current configuration being mostly ok, I wouldn't like to have to redo everything.
I'd like a program that can show me what is configured so far, and with wich I can add new rules (for iptables?).
I've tried with Firestarter, but there is no slackware package, and I tried compiling from source, and I am currently in the classic Linux dependency hell. Firestarter requires gconf, gconf requires a file ORBit-2.0.pc. now what is that? Couldn't find anything with google.

So, does anyone know of such a program?
i'm not positive, but IIRC the Webmin firewall configuration module lets you do this...

Quote:
In wich file is the current iptables configuration stored? (if any)
depends on the distro, but red hat-based distros will typically store it in the /etc/sysconfig/iptables file... this file gets used by an iptables-restore command within the startup scripts... on slackware, however, one usually uses a regular iptables *script* (/etc/rc.d/rc.firewall) instead of an iptables configuration file...

Quote:
How can I enable firewall activity logging? (or is it already on? nothing in my /var/log) I was hoping the firewall gui could do this.
well, it's just a matter of issuing one or more adequate rules with the LOG target... if an iptables front-end lets you add/edit rules as you wish, i would expect to be able to use the LOG target... the syslog daemon will get used for logging, so if you have that running then you should see (in most cases) the log entries in your /var/log/syslog file...

Last edited by win32sux; 04-15-2007 at 03:26 PM.
 
Old 04-18-2007, 12:38 PM   #3
Valkyrie_of_valhalla
Member
 
Registered: Jan 2006
Location: Romania
Distribution: Suse 12.0, Slackware 12.1, Debian, Ubuntu, Gentoo
Posts: 301

Original Poster
Rep: Reputation: 30
Thanks for the info.
I will try out Webmin.
Weird, I don't seem to have a rc.firewall in /etc/rc.d... Probably iptables isn't configured properly ( I left it as it was after the default install), although I seem to have no other open ports besides the ones I require...
There seem to be no entries regarding the firewall in /var/log/syslog, but it's obvious why, I think...

I'll struggle a bit more with Firestarter, then I'll try Webmin.

If anyone has any other suggestions or advice, I'm open to anything.
 
Old 04-18-2007, 01:17 PM   #4
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by Valkyrie_of_valhalla
Weird, I don't seem to have a rc.firewall in /etc/rc.d... Probably iptables isn't configured properly ( I left it as it was after the default install)
the rc.firewall file doesn't exist by default...
 
Old 04-18-2007, 02:07 PM   #5
Valkyrie_of_valhalla
Member
 
Registered: Jan 2006
Location: Romania
Distribution: Suse 12.0, Slackware 12.1, Debian, Ubuntu, Gentoo
Posts: 301

Original Poster
Rep: Reputation: 30
Ok, I get it now.
I installed Webmin.
When I go to Network - Linux Firewall, I get the following error:
Code:
An error occured when checking your current IPtables configuration :

FATAL: Module ip_tables not found.
iptables v1.3.5: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

This may indicate that your kernel does not support IPtables.
I recompiled my kernel, and it is possible I have not installed this module. I'm thinking of recompiling it, but I can't seem to find an ip_tables module with the gconfig program, where I select the modules/drivers that are to be in the kernel.

So, where can I find this module? Either in the program, to recompile the kernel, or someplace to download it and install it like a regular driver maybe?

EDIT: is it the same one marked as netfilter?

Last edited by Valkyrie_of_valhalla; 04-18-2007 at 02:11 PM.
 
Old 04-18-2007, 02:14 PM   #6
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by Valkyrie_of_valhalla
Code:
An error occured when checking your current IPtables configuration :

FATAL: Module ip_tables not found.
iptables v1.3.5: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

This may indicate that your kernel does not support IPtables.
make sure you have CONFIG_IP_NF_FILTER=m set in your .config...
 
Old 04-19-2007, 12:55 PM   #7
Valkyrie_of_valhalla
Member
 
Registered: Jan 2006
Location: Romania
Distribution: Suse 12.0, Slackware 12.1, Debian, Ubuntu, Gentoo
Posts: 301

Original Poster
Rep: Reputation: 30
Thanks, it works after the kernel recompile with that option.
It seems to be about what I wanted.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to view current kernel configuration emersony Linux - Networking 3 05-27-2013 07:36 AM
current state of gui for package managers pbhj Slackware 6 09-12-2006 02:24 AM
possible to make iso from current configuration jnev Ubuntu 6 07-26-2005 11:00 AM
Loading current kernel configuration in menuconfig gauntalus Linux - General 2 02-10-2005 03:47 PM
GUI Tools for Linux Firewall Configuration pradsy90 Linux - Security 3 02-12-2004 08:28 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:02 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration