LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 01-31-2011, 03:31 AM   #1
dman777
Member
 
Registered: Dec 2010
Distribution: Gentoo
Posts: 232

Rep: Reputation: 8
Is Shorewall better than IPTables? (Even though it uses IP Tables)


I know very little about network security. I am currently using Shorewall firewall. I am thinking about switching to just using iptables because it seems more simple and there is more documentation/tutorials on it. But I am scared I would loose extra security that Shorewall offers. Does Shorewall offer any extra security over IPtables?
 
Old 01-31-2011, 03:39 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977
It's about how you use it rather than what it is. Look at the rulebase that shorewall implements and you'll see there are a lot of best practise rules for DOS and such that are there. You don't have to use them, you are free to use iptables however you want, but you gain a layer of best practise usage that you might otherwise not know about and therefore be vulnerable. If you DO know about it (or maybe just blindy copy from elsewhere) then you will be just as secure. Of coutrse, that's only for the netfilter side of shorewall which does other things besides.
 
1 members found this post helpful.
Old 01-31-2011, 03:52 AM   #3
dman777
Member
 
Registered: Dec 2010
Distribution: Gentoo
Posts: 232

Original Poster
Rep: Reputation: 8
Well, my desktop is behind a router with a firewall(Asus rt-n12 with dd-wrt). I feel that I'm not really learning anything by using shorewall. If I used IPtables to learn more, could I afford to loose the protection from using IP tables with bad practice rules(since I will be learning and experimenting) with the router firewall protection? Or am I taking a risk at allowing my system to be exploited?
 
Old 01-31-2011, 04:13 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977Reputation: 1977
It depends whether you want to live in a theoretical or real life world. I'd say you're fine to mess around given your on a LAN already. Unless you're using a "DMZ host" feature on the router or similar, I'd not be too fussed. I'd probably suggest you start by looking at the current shorewall rulebase, work out why each line exists and go from there.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
default iptables tables debic Linux - Networking 2 09-11-2007 04:43 PM
Three Tables in IPTABLES winxandlinx Linux - Security 5 11-17-2006 09:48 AM
shorewall iptables, ftp xilace Linux - Networking 8 11-16-2006 10:52 AM
Shorewall and iptables service Suhy Linux - Software 9 11-01-2006 04:40 AM
Shorewall and iptables for mandrake 10 hoarenet Linux - Security 6 09-04-2004 09:31 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 06:14 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration