Firewall software

[acidfast7]

I just finished installing RedHat 7.0 and I have a DSL line. What do you recommend for firewall software?

Are good security mesaures built in to Linux vs. Windohs?

Thanks in advance,
Roger

[syn]

firewalker get it from sourceforge or prolly freshmeat

[SlCKB0Y]

Umm... ipcahins?

[Gaccm]

check our the networking forums lots of info there. do you got any experience? if not try pmfirewall.

[vvx]

A simple ipchains firewall is what I use on my firewall. I have no ports exposed to the outside world so it works pretty well. Now, if I were running a few services, I might slap on portsentry as well. Ipchains = traditional firewall stuff.. You tell it what to allow and what to deny. Portsentry listens on select closed ports and if it detects a scan can do various things, the most useful being drop em via ipchains. The difference? Portsentry can't close off or control traffic on it's own. For example, I have telnet installed on my firewall box, portsentry could not block all connections from the outside. Portsentry could effectively make a box with it exposed to the outside appear that it was not however, a feat ipchains couldn't do. However, probably more important than anything else you can do about security is read up on the available information. There is a couple good NHF's that cover the basics that I suggest.. G'luck!

[camelrider]

www.seawall/sourceforge.net (http://www.seawall/sourceforge.net) has an easily configured firewall whichI've found effective.

------------------
We'll get thisright yet!

[conman]

For piss easy and decent firewall setup try pmfirewall. You have to have ipchains installed on your machine (most distributions include it and many install it by default).
Get it here: http://www.pointman.org

[DodgeTrucs]

Firestarter is my firewall of choice, very easy to setup and I have had a few people scan all my ports, not one gave any responce, and it passes all tests at www.grc.com, (http://www.grc.com) made for gnome but works fine in KDE. http://firestarter.sourceforge.net/
---Charlie

[This message has been edited by DodgeTrucs (edited 08 December 2000).]

[acidfast7]

Thanks for all of the ideas. You guys are awesome.

Just wanted to say that this OS rocks. It seems to have endless configuration options as opposed to Win98. It makes it well worth the headaches I went through installing my old PnP ISA card.

Roger

------------------
I am at the bootom of the Linux learning curve.