Shorwall .Vs. Guarddog

Kamikazee · 07-14-2005, 07:48 PM

Im currently using the guarddog Firewall and considering installing Shorewall instead.

Is shorewall easy to configure indevidual ports? provide DHCP support?

Skyline · 07-15-2005, 01:56 PM

Quote:

Originally posted by Kamikazee

Is shorewall easy to configure indevidual ports?

To give you an introductory idea were individual ports are explicitly specified, and as an example - you can use "syntax" like:

Code:

# /etc/shorewall/rules

ACCEPT fw net udp 53
ACCEPT fw net tcp 25,80,110,443,6667

As you can see, we're allowing outbound connections to those specified ports.

(The above code from an /etc/shorewall/rules file could be used in combination with a "drop all outbound" type of policy in an /etc/shorewall/policy file (for a basic workstation, for example)).

As ever, to get the best out of it, it's a case reading up a little on the Shorewall documentation - alternately, if Guarddog is currently sufficient for your needs then you might want to stay with that - plenty of choice though, as ever

JARofHERB · 07-15-2005, 11:15 PM

I use firestarter, and think that it is alot better than both guardog and shorewall, check it out man....

neilcpp · 08-12-2005, 11:14 AM

I have just started using firestarter. Took 5 minutes to download and get it installed and running. If your after ease of use I would suggest this program.

Vgui · 08-12-2005, 02:33 PM

I recommend Shorewall, mainly because it just does the job with no hassle. Even if you use the default / sample configuration you are "locked down" right off the bat.
Guarddog and Firestarter do have GUIs though, but I find them more intrusive.
In the end, they all get the same job done (which is tuning your iptables).

xxx_anuj_xxx · 08-12-2005, 03:53 PM

I am agree with Vgui for recommending Shorewall
Just go the the site and read the instructions easy to configure also you can download configuration files from
Sample Configurations
Good performance.

mrcheeks · 08-12-2005, 04:23 PM

I am using firehol but i was using shorewall which i find pretty good. As long as the firewall scripts or front-ends you intend to use, are well tested , stable and documented, i guess it is ok.

adrianmak · 08-15-2005, 07:25 PM

i recommend shorewall too
It is really feasible in configurate ur rules, hiding details of iptables and provide a high level user friendly concept
shorewall provided other features that firestarter nor guarddog is missed
e.g. traffic accounting, vpn, tos, etc

if people want a graphical gui, you can install webmin which included a shorewall module

of course if you want to get the full power of shorewall, you should get into the shorewall config files directly