1 |
On Sunday 01 July 2007 11:42, Paul Waring wrote: |
2 |
> On Sun, Jul 01, 2007 at 06:05:14PM +0800, sain yan wrote: |
3 |
> > It`s dificulte to me for setup iptables!!! |
4 |
> > |
5 |
> > |
6 |
> > |
7 |
> > Are there any GUI tools in profiles??? |
8 |
> |
9 |
> There are plenty of GUIs out there - just google for 'iptables GUI' and |
10 |
> you'll find dozens of tools to help you. However, using iptables at the |
11 |
> command line isn't too difficult if you're only doing simple things like |
12 |
> closing/opening ports on your machine. |
13 |
|
14 |
It is probably simpler than what you think to understand iptables and setup a |
15 |
simple rule set. Have a *slow* look at: |
16 |
|
17 |
http://www.gentoo.org/doc/en/articles/linux-24-stateful-fw-design.xml |
18 |
|
19 |
which is an excellent tutorial to take you through the steps of designing and |
20 |
setting up your own firewall. There's also man iptables to compliment the |
21 |
tutorial and explain the many options that exist within iptables. |
22 |
|
23 |
If you are going to manage a production server or a machine with service ports |
24 |
open to the wide web, which is expected to come under considerable attack, |
25 |
you may also want to read this: |
26 |
|
27 |
http://www.gentoo.org/doc/en/articles/dynamic-iptables-firewalls.xml |
28 |
|
29 |
Alternatively, you can use one of the many automatic script generators and GUI |
30 |
rule managers. If you are used to managing GUI firewalls like you find in MS |
31 |
Windows, then Firewall Builder may suit your needs: |
32 |
|
33 |
http://www.fwbuilder.org/archives/cat_about.html |
34 |
|
35 |
However, the time you will spend to set up a gui and read its manual and then |
36 |
configured it, would probably exceed what it takes to read the iptables |
37 |
articles and set a manual firewall ruleset. |
38 |
|
39 |
HTH. |
40 |
-- |
41 |
Regards, |
42 |
Mick |