LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 11-02-2008, 02:39 PM   #1
centosfan
Member
 
Registered: Jun 2003
Location: Golem city
Distribution: Server - Debian Desktop - Linux Mint
Posts: 219

Rep: Reputation: 32
Question about firewall and iptables


Is there any tutorial which i learn more about it?
All i want to know is to how to check what ports are open and what are closed,and how to add dynamic ip adress for specific port.
Or is there are web gui which could help in this.(like ip cop which which is stanalone linux)
 
Old 11-02-2008, 03:32 PM   #2
pinniped
Senior Member
 
Registered: May 2008
Location: planet earth
Distribution: Debian
Posts: 1,732

Rep: Reputation: 50
There are numerous GUIs for setting up the firewall.
The iptables documentation has really improved in the past few years, so a good place to start would be:

man iptables

I've found most 'tutorials' to be pretty poor - rather than explain things they just say "type in blah and blah and blah" and you don't really learn anything about how to control what comes in and what goes out and what gets forwarded.

Which ports are open has absolutely nothing to do with the firewall rules; that depends on what services are running and the connections to those services - in ftp for example, another port is negotiated and the remote machine reconnects on that port. Of course if you drop all packets to a server's listening port then that port is effectively 'closed'.
 
Old 11-03-2008, 12:03 AM   #3
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Rocky 9.2
Posts: 18,359

Rep: Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751
You can get nmap and run it against your own system to find out what's open.
 
Old 11-03-2008, 01:31 AM   #4
ramesh.mimit
LQ Newbie
 
Registered: Nov 2006
Posts: 26

Rep: Reputation: 15
For know about the open ports on any system you can run Nmap utility, available in pretty cool GUI interface also.

For IP tables you can install webmin, having easy to manage and configure IPtables.
 
Old 11-03-2008, 07:48 PM   #5
centosfan
Member
 
Registered: Jun 2003
Location: Golem city
Distribution: Server - Debian Desktop - Linux Mint
Posts: 219

Original Poster
Rep: Reputation: 32
Quote:
Originally Posted by ramesh.mimit View Post
For know about the open ports on any system you can run Nmap utility, available in pretty cool GUI interface also.

For IP tables you can install webmin, having easy to manage and configure IPtables.
Yeah i just noticed that.I have installed webmin.
 
Old 11-04-2008, 08:43 AM   #6
Autocross.US
LQ Newbie
 
Registered: Aug 2006
Location: Chesapeake, VA
Distribution: Solaris, HP-UX, RedHat, Fedora
Posts: 15

Rep: Reputation: 0
Quote:
Originally Posted by JACOBKELL View Post
Is there any tutorial which i learn more about it?
All i want to know is to how to check what ports are open and what are closed
'netstat -tupnl' will show you which processes/programs have open ports listening for connections.

Try googling for example iptables rulesets. One i found that had some good examples:

http://oceanpark.com/notes/firewall_example.html
 
Old 11-08-2008, 06:33 AM   #7
salasi
Senior Member
 
Registered: Jul 2007
Location: Directly above centre of the earth, UK
Distribution: SuSE, plus some hopping
Posts: 4,070

Rep: Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897
Quote:
Originally Posted by pinniped View Post
I've found most 'tutorials' to be pretty poor - rather than explain things they just say "type in blah and blah and blah" and you don't really learn anything about how to control what comes in and what goes out and what gets forwarded.
I'm going to disagree with that; have a look at the Iptables tutorial at frozentux. Its probably closer to a manual than a tutorial, and it assumes that you have a solid understanding of networking (...and not everyone does, me included) before you start. Then have a look at the 'tutorials' (well, examples) that you can find scattered aroung the web and see if you can understand what is going on.

I'll certainly agree though that just typing in something that someone else uses is not going to help your understanding much, if at all. And, if you do this in a different context from the one that they had when they wrote it, that can clearly be a security risk.
 
Old 11-10-2008, 01:31 AM   #8
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Rocky 9.2
Posts: 18,359

Rep: Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751
Try http://www.netfilter.org/
 
Old 11-10-2008, 01:49 AM   #9
billymayday
LQ Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
This, for me is the definitive guide http://iptables-tutorial.frozentux.net/ (I think this is what salasi was probably referring to) and I think you can get there from chris's link as well.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Iptables with iptables-firewall.conf arno's matt3333 Slackware 16 06-28-2007 07:20 AM
iptables firewall rule question xxrsc Linux - Networking 8 06-07-2006 02:57 PM
Question about IPtables/firewall rules ilan1 Linux - Security 3 02-20-2006 11:58 PM
Iptables question? What is this? :RH-Firewall-1-INPUT - [0:0] abcampa Linux - Security 3 05-09-2005 12:44 PM
firewall/iptables question iceman47 Linux - Networking 4 12-19-2002 02:37 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 08:16 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration