Re: Bind Firewall Rules

[andylockran <andy@xxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

John,

> Maybe I'm just missing something... I have
> 
> -A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 53 --state NEW -j
> ACCEPT
> -A RH-Firewall-1-INPUT -p udp -m udp -m state --dport 53 --state NEW -j
> ACCEPT
> -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> 
> I'm not very good with firewall rules, but I assume these are the three
> that are important?

I find shorewall is a fantastic front-end to iptables.  Options such as
"shorewall safe-restart" - (which prevents the new rules being
permanently applied by asking you for confirmation after they've been
applied.  If you don't respond then it reverts back to the old ruleset).

It's saved me a lot of hassle :)

Regards,

Andy
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkiHaDoACgkQauMjEM4rxIQO6wCeKBb+QOj4/77Ocs8hUD+SgWY5
lV4AoLRNqOUTyyFdfMlwQLrRK7YaFpgz
=F3IR
-----END PGP SIGNATURE-----
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos