How to choose firewall rules?

[NeilBlue]

Hello,

I am trying to setup a hardware firewall for my Linux box, but I don't know what firewall rules to implement. Is there some guidelines for how to get this started.

Cheers
Neil

[x]

Well, yes there is.
Design your network, decide which approach you need:
The safest is to block everything, then grant access to only the necessary.
This could be difficult to set up though, another way is to block the unwanted. Not as safe, but you'll have less problems.

Is is a home network,permanent or telephone connection? How much safety do you need?
Remember, if you block everything you & other folks at home might not be able to surf freely before every permission is correctly granted, this could be very frustrating.

Use pen & paper to design your security, start the actual firewall-configuration when you know what to do. If you just go about typing IP-tables rules you'll probably very soon loose control.

[sudo]

set all chains drop!!!

draw a pic of ur setup... totally agree!!!! makes life so much easier!!! is it a stand alone FW or is the firewall doing anythin els?? u have a DMZ??
think it through before implementing... saves u a LOT of time!!!

[NeilBlue]

Thanks,

Yeah it is just a home network. I will probably drop all and then poke the holes through where I need them.

Cheers
Neil