Re: [gentoo-user] Hardening a laptop for travel

[Grant]

> > > I have shorewall set up on my router but I haven't set up anything
> > > security-wise for my laptop which normally sits behind the router.
> > > What should I be setting up on the laptop in preparation for traveling
> > > and connecting via a foreign network or even directly to the Internet?
> > >  I don't run sshd on the laptop.  I would think shorewall, but am I
> > > forgetting anything?
> >
> > At the very least I'd do the following with iptables:
> >
> > iptables -P INPUT DROP
> > iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
> > iptables -A FORWARD -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
>
> This line is only needed if you want to forward packets to another
> iface/device (i.e. when your laptop is acting as a router and the input
> interface is eth0).

Alright I guess I'll just set up shorewall on the laptop with a config
similar to the router's.  Maybe I'll set up shorewall on the other
system in my local network while I'm at it.

- Grant
-- 
gentoo-user@g.o mailing list