On Tuesday 06 Oct 2015 20:14:59 James wrote: > Hello, > > I just ran across this page: > > http://gentoo-en.vfose.ru/wiki/Iptables/Iptables_and_stateful_firewalls#Sta > te_basics > > It has a basic firewall using iptables. > Not bad for a generic firewall on a openrc workstation. > What is the best way to auto lauch this sort of firewall.sh ?
Start iptables, run the script, stop iptables with '/etc/init.d/iptables stop' which will save your rules to /var/lib/iptables/rules-save, or run 'iptables- save /var/lib/iptables/rules-save'. Add any sysctl changes to /etc/sysctl.conf, so that they are permanent. Re-run the script if you want to change things in it. > Any improvements in this basic workstation firewall > everything out, nothing in? Yes, but such improvements are suggested in subsequent scripts on the same page, e.g. ICMP handling, selective logging, etc. If all you want is "a basic firewall using iptables" for the IPv4 workspace, then what you have will do the job. > Any good tools to quickly test this firewall from another local > workstation? nmap -A -T4 -P0 -vvv -p1-65535 XXX.XX.XXX.XX -- Regards, Mick
signature.asc
Description: This is a digitally signed message part.
