Click to See Complete Forum and Search --> : Setting up IPCHAINS


ltrain
05-22-2001, 02:30 PM
Hello ALL!

Has anyone successfully setup a RH Firewall? I know how this is gonna make me sound, but I have read a ton of documentation on setting up tcpwrappers and ipchains and I'm still a little lost???

Setting up tcpwrappers is very straight-forward but ipchains is a different story.

If you are reading this please correct me (or fill-in) the holes. Thanks.

1) disable all un-needed services
2) setup tcpwrappers
3) secure passwords
4) most of the documentation mentions using a script to setup chains but the docs are vague.) -- Example: A script to start packet filter and states to add it to appropriate runlevels.

--How do you know which one is correct runlevels.
--How do you add the script to a runlevel? --Documentation mentions to check what runlevels include network and make sure it loads beforem them -- How do I do this?

5) setup ipchains
6) save codes
7) reboot and test security

Thanks in advance for your suggestions!

undef
05-22-2001, 03:00 PM
Originally posted by ltrain:
<STRONG>Hello ALL!


--How do you know which one is correct runlevels.
--How do you add the script to a runlevel? --Documentation mentions to check what runlevels include network and make sure it loads beforem them -- How do I do this?

</STRONG>

when you first boot your machine, it tells you what you runlevel you're running at. if don't see that look through this file: /etc/inittab
there should be a line that tells you what runlevel your computer runs on(it's between 1-6).

once you figure out what runlevel your computer runs on, cd to /etc/rc#.d (replace # with the runlevel number) you'll see a list of scripts with filenames looking like this S##scriptname or K##scriptname.
to add a new script make a symbolic link from this directory to where this new script is located. its name should be S##scriptname or K##scriptname. the ## are integers which decides which script runs first. use S if you want the script to run during bootup or K if you don't.