Yesterday at 4:13pm, Jeffrey Forman expounded:

++ I've been reading about the latest SNMP security stuff, and all of them
++ are telling about firewalling ports off. I'm using a very homegrown
++ scrap together script, doing some firewalling of ports from the external
++ nic, port forwarding (netmeeting), and basic NAT. Anyone recommend/use a
++ iptables firewall script for a dual-NIC machine? I'm doing basic nat,
++ identd server, smtp, ssh. Basic stuff, but obvioulsy want a more secure
++ setup. Anyone recommend a script out on the 'net?

There probably are some decent scripts out there somewhere, but you'll do
yourself a big favor if you figure out how tcp/udp/ip and nat works and
other security stuff (like running daemons chrooted or not as root, etc.)
*and* subscribe to bugtraq.

BTW, the standard line in firewalling talk is to turn off all access and
NAT and then explicity allow access to certain ports and NAT to certain
machines (w/ hw ethernet address), etc. *Not* vice versa.

-- 
Left to themselves, things tend to go from bad to worse.


_______________________________________________
Siglinux mailing list
[EMAIL PROTECTED]
http://www.utacm.org/mailman/listinfo/siglinux

Reply via email to