| 1 |
I've used both firehol and shorewall, and they're both great! |
| 2 |
But for a more advanced setup, I would recommend shorewall (firehol is a bit tricky at some points, like port-forwarding), it will save you a lot of time (setting up a 3 NIC firewall with shorewall takes less than 30 minutes)... |
| 3 |
|
| 4 |
Oscar |
| 5 |
|
| 6 |
On Fri, 26 Aug 2005 22:36:39 +0000 (UTC) |
| 7 |
James <wireless@×××××××××××.com> wrote: |
| 8 |
|
| 9 |
> Hello, |
| 10 |
> |
| 11 |
> I've decided to take the plunge and build my first, full featured |
| 12 |
> firewall on Gentoo. At first I was going to use 'gnap' but further |
| 13 |
> reading reveals that this sort of derived firewall is stateless, |
| 14 |
> and I want a statefull firewall. It's also masked. |
| 15 |
> (feel free to correct me if I miss something). |
| 16 |
> |
| 17 |
> The firewall will have (3) nics, Outside(static IP) |
| 18 |
> DMZ for several web servers, mail server and DNS secondaries |
| 19 |
> and a private for a DNS server, PCs(doz) and assorted Linux systems. |
| 20 |
> So after googling for a while, I could not find any detailed documentation |
| 21 |
> on building a gentoo based robust firewall (I sure thought I'd ran across |
| 22 |
> such a page/document, but, nothing today). |
| 23 |
> |
| 24 |
> I did find some packages to 'ease the pain' on configuring iptables |
| 25 |
> and completing the firewall: Recommendations here? |
| 26 |
> fwbuilder |
| 27 |
> bastille |
| 28 |
> kmyfirewall |
| 29 |
> firestarter |
| 30 |
> |
| 31 |
> I did find this gentoo document: |
| 32 |
> http://www.gentoo.org/doc/en/home-router-howto.xml |
| 33 |
> This example is for a 2 nic basic firewall. |
| 34 |
> I need a dmz that will have web servers, dns servers, and |
| 35 |
> will ensure security. |
| 36 |
> |
| 37 |
> I did find one Debian-centric security document: |
| 38 |
> http://www.debian.org/doc/manuals/securing-debian-howto |
| 39 |
> |
| 40 |
> Alternatively, since this machine is only going to be a firewall |
| 41 |
> & ethernet router so rather than securing a complete Gentoo system |
| 42 |
> I could just use a 'firewall cd' installation, if one exists |
| 43 |
> as a Gentoo derivative. |
| 44 |
> |
| 45 |
> Any other ideas or recommendations on documents or firewall install |
| 46 |
> config on gentoo or a gentoo derivative are most welcome? |
| 47 |
> |
| 48 |
> Note: my firewall experience is mostly with openbsd. |
| 49 |
> |
| 50 |
> |
| 51 |
> James |
| 52 |
> |
| 53 |
> -- |
| 54 |
> gentoo-user@g.o mailing list |
| 55 |
> |
| 56 |
-- |
| 57 |
gentoo-user@g.o mailing list |
Archives