firewall please help,

westverg · 11-24-2005, 11:23 PM

hi guys i just hav a couple of question here, My plan is to use suse10 as a DHCP-samba--web-ftp=server. my samba does'nt hava a login to view or to put a files in the shared folder from linuxbox. I'm confused on the security my my linuxbox. this server serve for a personal use.

I would like to ask what will i do to my firewall settings. i would like to ask your suggestions.

thanks

musicman_ace · 11-24-2005, 11:57 PM

I'm not certain that I follow the question, but if your asking how to start off your firewall,

Close all ports and then open the following.

67/68 TCP & UDP for DHCP
80 & 443 for webserver
20 & 21 for ftp server
445 for samba

westverg · 11-25-2005, 02:31 AM

Quote:

Originally posted by musicman_ace
I'm not certain that I follow the question, but if your asking how to start off your firewall,

Close all ports and then open the following.

67/68 TCP & UDP for DHCP
80 & 443 for webserver
20 & 21 for ftp server
445 for samba

thanks for your reply musicman_ace, and sorry for my question.
anyway i'm just confused what will i put in my firewall.

musicman_ace · 11-25-2005, 11:20 PM

The following link is documented well and should get you started. Though it states that its a stronger firewall, there is room for improvement. It does well for a soho/home user environment though.

http://www.e-infomax.com/ipmasq/howto/c-html/stronger-firewall-examples.html

karunesh · 11-26-2005, 12:58 AM

which firewall are you using, is it IPTables ?.

musicman_ace · 11-26-2005, 05:21 AM

yes, I write my own iptables firewall in a bash script. That give me complete control and rests all the blame on me.

westverg · 11-26-2005, 08:09 PM

Quote:

Originally posted by musicman_ace
The following link is documented well and should get you started. Though it states that its a stronger firewall, there is room for improvement. It does well for a soho/home user environment though.

http://www.e-infomax.com/ipmasq/howt...-examples.html

thanks again musicman_ace..

fotoguy · 12-15-2005, 03:20 AM

might want to open port 137,139 tcp udp for samba as well.