Newbie needs help configuring iptables
 

Hi,

I'm setting up a DNS server using Scientific Linux and I would like it to be very secure. It should only accept DNS queries, zone transfers. I should also be able to connect to my server using putty.

I'd appreciate some pointers on how to achieve this.

This would be really simple, I ripped it from "The best damn firewall book...."


IPTABLES -P INPUT DROP
IPTABLES -F INPUT
IPTABLES -P OUTPUT DROP
IPTABLES -F OUTPUT
IPTABLES -X
IPTABLES -Z
IPTABLES -N drop-and-log-it
IPTABLES -A drop-and-log-it -j LOG --log-level info
IPTABLES -A drop-and-log-it -j DROP
IPTABLES –A INPUT –s 0/0 –d 0/0 –p tcp –dport 53 –j ACCEPT
IPTABLES –A INPUT –s 0/0 –d 0/0 –p udp –dport 53 –j ACCEPT
IPTABLES –A INPUT –s 0/0 –d 0/0 –p tcp –dport 22 –j ACCEPT

This is in no way "very secure", this would represent the minimal firewall that I can think up at 5 in the morning. I'd suggest buy that book, or another but I like how that one is laid out. Its more like a pocket reference.