grub gang, rise up!

On the other note:

I didn't run the rc.firewall as of yet - i merely skimmed/read the generated files.

@mlangdn

But the interface(s) where listed as joined string (no patch) or spaced apart (with my change applied to it)?

Well bless my ever-lovin' flea-bitten arse.........

After running lilo and a reboot, I ran the newly named myfwconf. At the ncurses window, I selected yes to begin. The highlighted yes turned to no. The only way out was to select no.. I gotta reread what SCerovec did.

The youth these days ...

Being only 67, I have a few mistakes left in me.

Oh yea, I tried again, and I answered the generic questions, then it said configuring firewall for the next 30 minutes. I killed it. Thbbbb.

Firewall up and running. Very Basic.

I was certain You had it in ya!

Yes it is what it is - a very basic, somewhat customizable, firewall.

Nothing to write home about (as of yet) but the point is to get it to life first, then only we might (or not) add somewhat more fancy like the trapit destination or some other of the many Linux kernel iptables specialties

I'm just a home user with no servers or anything that would draw interest.

I've been using this script as well: something like this script, at the end of setup, wouldn't hurt... it's the first thing I usually do anyways. I think this script could be updated to also handle ipv6 connections--since it doesn't, I have been disabling ipv6, because I don't seem to need it.

It's easy enough to create different configurations and have /etc/rc.d/rc.firewall.home vs /etc/rc.d/rc.firewall.cafe. /etc/rc.d/rc.firewall could use arp to compare mac of router to see if it matches home router, and then execute the home version... and if no match, execute the cafe version, thereby having "zones". Of course, to use arp, the network is usually up... /etc/rc.d/rc.firewall could call dhcpcd -G (does not set default routes) so as to deterimine mac address of router and set appropriate firewall. The route would be set when running NetworkManager afterwords.

IMHO, answering some basic firewall questions at the end of setup would be a fine addition to slackware: advanced users would and should change it afterwords to whatever they prefer.

2 members found this post helpful.