Click to See Complete Forum and Search --> : Firewall


Condor182
11-04-2002, 11:16 PM
I'm a newbie just installed SuSE 8.0
I would like to know how can I install a Firewall??
Thnx

alcacic
11-04-2002, 11:47 PM
You might check here (http://www.bastille-linux.org).

Get the Red Hat/Mandrake version and it should do the trick for you.

bwkaz
11-05-2002, 02:29 PM
There is also the iptables Tutorial at Netfilter.org, which does a good job of explaining how to enable and then configure and use Linux 2.4's (that's the kernel version) built-in firewall, along with the user-mode software to control it (iptables).

However, you probably need to know a bit about networking to get it to work... just a warning.

I didn't know Bastille started up a firewall... I though it was just a system security testing program. Hmm.

Oh, I see, it's ipchains. OK, well, if you want to go with the older firewall control software, I guess... ;)

Condor182
11-05-2002, 05:12 PM
Thnx for the tips.
Actually i'm looking for a good firewall an up to dated firewall.
And since you told me that this one is an old one.
I would apreciate it if you could recomend me an up to dated and good firewall.
Thnx :->

bwkaz
11-05-2002, 09:11 PM
iptables is up to date. It uses the new kernel 2.4 firewall code.

ipchains, though, uses the older kernel 2.2 firewall code, so it is slightly older.

But a warning first: If the reason you want a newer firewall is so that it has more rules in it (like the reason someone might want a newer anti-virus program in Windows), then neither of these will help you. iptables and ipchains both merely provide the framework for you to write your own rules; they do not turn on and off certain transport types, or ports, or anything like that.

Although there are people that have put together some good iptables scripts; perhaps a G4L search would turn some up? I don't know, I wrote my own, but it's specific to my network setup, so I don't think posting it anywhere would help you much.

If you want a newer firewall just for the inherent security of it or something (lack of bugs in the code, that is), then try iptables.