Re: comments about lokkit default script

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On Fri, 12 Sep 2003, Stephen Smoogen wrote:

>
> Basically to understand the script a bit better you should look at how
> the rules look in the table.
>
> iptables -nxvL
>
> should give you some output. If the default policies are to ACCEPT
> things then what is happening is that you are accepting ALL outbound
> traffic and very little inbound traffic. The newest
> redhat-config-firewall in their rawhide has some changes to this, but I
> have been doing custom firewalls for too long now to remember what they
> are (I think they put in an ESTABLISHED,RELATED rule in now.)
>
> Are you forwarding traffic through your firewall or just using it as a
> client. If you are using it as a client it is pretty ok and secure. If
> you are using it as a forwarder you will probably want to make some
> changes for interfaces to be semi-trusted.

I'm not sure what this means. The firewall is set up on my home computer's
kernel, which is also the only computer I have, no LAN (I think they call
it). As I understand it, all packets coming and going from my computer
pass through this firewall. I don't think I am doing any forwarding. Is
this done for other computers connected to the net through the firewall?

                                                                Faheem.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux