firewall solutions

[newbi]

Any suggestions for a good firewall?

[slacker_x]

could you perhaps be a little bit more vague?

....didn't think so. Do you already have hardware? How many computers behind the firewall? What are your needs?

etc. etc. etc.

[Spazegun2213]

kyote linux (sp?)
its a linux specificaly for firewalls... my friend built one and its very cool...


:)

[mope]

Here, let me try :) I just reinstalled Mandrake 8.1 and installed a/the (firewall (the only two names I remember are bastille and tiny). Now, before when I checked it at grc.com my ports were stealthed. Now they are closed. Am I missing a setting (I want them stealth)? Tell me where to begin and I'll let you know what I did (BTW - to set it up I just put no, no, no, no, to every question and set my security to High).

[Choozo]

SmoothWall (http://www.smoothwall.org) is an excellent option if you have a spare box.

Using on-line portscanners is in general a very bad idea. They may be set up by 'baddies' just to harvest data on unsecured IPs, all with the users consent .... and how can you trust/verify the returned TestReport which would be a bogus one if 'baddies' run the site?

[ 06 May 2002: Message edited by: Choozo ]

[mope]

Have you heard bad things about Steve Gibson's ShieldsUp! site? Cuz that's where I went. Anyone have the answer to the question?

[mdwatts]

All kernels include basic firewall capabilities. The 2.2 series uses ipchains while the 2.4 has iptables (still supports ipchains).

The Security NHF's do have suggestions for firewalls and also a Google search will certainly find more including setup and configuration procedures.

[Lorithar]

Iptables is the way to go ..
check out http://people.unix-fu.org/andreasson/
for a good tutorial start on what iptables is.

[Molecule Man]

http://grc.com or http://dslreports.com are fine to do a quick test to see if you firewall is running.

In MDK 8.1, you can setup your firewall from the security tab in DrakConf. That will work fine.

I personally use Firestarter, partly because I screwed up bastille and tiny and this was easier to use than to fix what went wrong. A search on http://freshmeat.net will reveal several available.

[mope]

Originally posted by Molecule Man:
<STRONG>http://grc.com or http://dslreports.com are fine to do a quick test to see if you firewall is running.

In MDK 8.1, you can setup your firewall from the security tab in DrakConf. That will work fine.

I personally use Firestarter, partly because I screwed up bastille and tiny and this was easier to use than to fix what went wrong. A search on http://freshmeat.net will reveal several available.</STRONG>
Ha, I love it! Thank for your responses. If anyone remembers how to set the ports to stealth mode let me know. I couldn't get it in linux config, but maybe I'll find something better at freshmeat (have to reinstall anyone by now...).