I think I need to install a software firewall for my laptop (running Debian sarge with a 2.4 kernel.

I used to use RedHat9 which had some sort of built-in firewall/firewall configuration utility and allowed setting the security level just by checking a few boxes -- ideal for me since I know next to nothing about network security. There doesn't seem to be anything like that in my Debian installation.

Am I just not looking in the right place, or do I have to install a separate package? I see people mentioning guarddog and firestarter, but no clear descriptions of them. Is guarddog only for KDE? (I use Gnome). I see there is also a Debian package for something called gnome-lokkit. Are any of these as easy to use as the RedHat firewall configuration?

What about bastille? Is that the same kind of thing?

Any recommendations?

Am I just not looking in the right place, or do I have to install a separate package?
Firewall on kernels 2.4.x and up is Iptables. Dunno about GUI's and Debian.


I see there is also a Debian package for something called gnome-lokkit. Are any of these as easy to use as the RedHat firewall configuration?
Lokkit is not a very confgurabel tool AFAIK.

What about bastille? Is that the same kind of thing?
Bastille-Linux is a hardening tool tho I don't know if it's for Debian: I know Tiger is. Removing software and services you don't need should go first. Hardening your box is next (CERT, SANS docs, vendor specific hardening, SecurityFocus.com, LinuxSecurity.com, Tiger, Bastille-Linux) and installing a filesystem integrity checker like Aide, Samhain or tripwire comes after that. Top it off installing Chkrootkit, Rootkit Hunter and regularly updating software and running audits and you'll have a good start at a better secured box.