Title: Re: [cobalt-security] Ipchains
Hi Jamey

>From one newbie to another ...

eth0 is your first ethernet port

eth0:X denotes a virtual adapter or alias for the physical adapter, in this case eth0. Any number after the colon denotes a virtual interface such as 0,1,2,3,etc.

eth1 is your second physical adapter or your second Ethernet socket on the back of the cobalt.

In order to use ipchains or iptables effectively your should use 2 physical Ethernet interfaces. The stateful inspection and routing available in ipchains is not designed for a single interface. A firewall on a single interface is similar to a waterproof teabag.

Ipchains is used on most often to restrict activity on a Ethernet interface and as such is effective as a security measure on single interface machines. However, I understand that you wish to use it to protect networks behind your cobalt and not just the cobalt itself.

Google is your friend for example configurations.

Good luck.
./Declan


On 2/11/02 14:16, Jamie Rossi at [EMAIL PROTECTED] wrote:

Hi,

I could do with some help on IPchains. Whilst I am a newbie to this ist, I have been administering Cobalts for 4 years now.

I have a couple of boxes running portsentry, so I want to tie this in with IPchains.

I have IPchains up on a box, but am having trouble with the configuration.

I need to work out which in my internal and which is my external adaptors.

 
These are what I can see

Eth0

Eth0:0

Eth0:1

Eth0:2

Lo

 

Any help would be appreciated.

Regards

Jamie Rossi

Reply via email to