LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-15-2005, 07:21 PM   #1
mrfixit1951
Member
 
Registered: May 2005
Location: Ladysmith, WI USA
Distribution: FC14
Posts: 42

Rep: Reputation: 15
Firewalls


I just had a disturbing thing happen. I was logged into one of the tech forums that i use in my work. Everyone there has his own Avatar, a small picture that you choose to represent yourself. Well, one of sight admins Avatar had a block of text that read "You are 67.136.151.171, you are running Linux, and using Firefox. If you had a firewall, you wouldn't be seeing this." I immediately clicked on KPPP Statistics, and sure enough, that was my Local Addr.!!! I was under the impression that Linux comes with a firewall.
I'm using Linux version 2.6.11-1.35_FC3, and SE Linux was activated during the install process. Anyone know what's up???
 
Old 07-15-2005, 07:33 PM   #2
mcd
Member
 
Registered: Aug 2003
Location: Denver, CO
Distribution: CentOS, Debian
Posts: 825

Rep: Reputation: 33
try running the following command in a terminal:

su
(password)
iptables -L


that should show you the current firewall rules.
 
Old 07-15-2005, 09:23 PM   #3
mrfixit1951
Member
 
Registered: May 2005
Location: Ladysmith, WI USA
Distribution: FC14
Posts: 42

Original Poster
Rep: Reputation: 15
mcd
iptables -L gives me "bash command not found"
rpm -q iptables gives me "iptables-1.2.11-3.1.FC3"
man iptables , shows me the man pages.
What's up? Are there letters in the command that are case sensitve?
 
Old 07-15-2005, 09:44 PM   #4
demian
Member
 
Registered: Apr 2001
Location: Bremen, Germany
Distribution: Debian
Posts: 303

Rep: Reputation: 30
You mean an avatar like this?
Having a firewall doesn't prevent other people from seeing your ip address.
 
Old 07-15-2005, 11:25 PM   #5
primo
Member
 
Registered: Jun 2005
Posts: 542

Rep: Reputation: 34
What's happening is that the web server is sending data directly to your own machine. The only way to hide your IP would be to use a proxy server, but all data would have to pass through this machine though.

Also, web browsers send an identifying string which programmers may use to properly format their pages. If you want to see what your browser sends for every page you visit, run:
Code:
nc -l -v -p 8000
Then open a browser window, and type: http://127.0.0.1:8000

So, that admin is wrong. If you want to see really scary stuff, see http://gemal.dk/browserspy/


Note that most Linux distributions don't activate a firewall by default. Run "iptables -L" as one user said too see if you're running one.

Last edited by primo; 07-16-2005 at 12:13 AM.
 
Old 07-17-2005, 02:05 PM   #6
mcd
Member
 
Registered: Aug 2003
Location: Denver, CO
Distribution: CentOS, Debian
Posts: 825

Rep: Reputation: 33
are you sure you ran iptables -L as root? if so, try which iptables, or locate iptables and try using the full pathname:

/usr/sbin/iptables -L
 
Old 07-17-2005, 02:57 PM   #7
Mara
Moderator
 
Registered: Feb 2002
Location: Grenoble
Distribution: Debian
Posts: 9,696

Rep: Reputation: 232Reputation: 232Reputation: 232
Re: Firewalls

Quote:
Originally posted by mrfixit1951
Well, one of sight admins Avatar had a block of text that read "You are 67.136.151.171, you are running Linux, and using Firefox. If you had a firewall, you wouldn't be seeing this." I immediately clicked on KPPP Statistics, and sure enough, that was my Local Addr.!!! I was under the impression that Linux comes with a firewall.
Your IP address is needed for th connection to work. You can hide it using NAT or proxy (like Tor). Your OS and browser come from HTTP headers. It's not true that with firewall the info will not be visible.
 
Old 07-18-2005, 04:15 AM   #8
maxut
Senior Member
 
Registered: May 2003
Location: istanbul
Distribution: debian - redhat - others
Posts: 1,188

Rep: Reputation: 50
Quote:
Originally posted by mcd

su
(password)
iptables -L
/sbin /usr/sbin are not defined in PATH for normal users in redhat-fedora distros. so it is better to become root with
$su -
command. so those directories will be in PATH envorment. (iptables binary is in /sbin dir)


#iptales -nvL
will give detailed info about rules.


good luck.

Last edited by maxut; 07-18-2005 at 04:16 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Getting around firewalls Gameon Linux - Networking 13 05-11-2005 08:27 PM
firewalls anyone? BajaNick Linux - General 0 02-05-2004 09:08 PM
Firewalls matt3333 Linux - Software 4 07-03-2003 10:53 PM
Linux Firewalls [iso firewalls] yoogie Linux - Networking 3 01-28-2002 06:56 PM
Firewalls Alejandro Aguilera Vega Linux - Networking 1 03-02-2001 03:52 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:03 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration