firewall configurator.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi!

I sucessfully migrated from ipchains to iptables, but now I am having a
hard time in setting up the iptables firewall script.

I used to edit /etc/sysconfig/ipchains by hand, since I am familiar with
it, but iptables is a whole new world.

I tried to use:

[root@imoqland rpms]# firewall-config
firewall-config: relocation error: firewall-config: undefined symbol:
__ti7QDialog
[root@imoqland rpms]#

So, probably it's configured to use ipchains, isn't it?

I also tried to use webmin's iptables configuration, but it's kind of
difficult.

What I try to accomplish is to convert this little ipchains script to
iptables:

:input ACCEPT
:forward ACCEPT
:output ACCEPT
-A input -s 0/0 -d 0/0 123 -p udp -j ACCEPT
-A input -s 0/0 -d 0/0 11371 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 11371 -p udp -j ACCEPT
-A input -s 0/0 -d 0/0 4661:4663 -p tcp -y -j ACCEPT
-A input -s 192.168.0.0/255.255.0.0 -d 0/0 111 -p tcp -y -j ACCEPT
-A input -s 192.168.0.0/255.255.0.0 -d 0/0 137 -p tcp -y -j ACCEPT
-A input -s 192.168.0.0/255.255.0.0 -d 0/0 138 -p tcp -y -j ACCEPT
-A input -s 192.168.0.0/255.255.0.0 -d 0/0 139 -p tcp -y -j ACCEPT
-A input -s 192.168.0.0/255.255.0.0 -d 0/0 137 -p udp -j ACCEPT
-A input -s 192.168.0.0/255.255.0.0 -d 0/0 138 -p udp -j ACCEPT
-A input -s 192.168.0.0/255.255.0.0 -d 0/0 139 -p udp -j ACCEPT
-A input -s 192.168.0.0/255.255.0.0 -d 0/0 111 -p udp -j ACCEPT
-A input -s 0/0 -d 0/0 22 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 -i lo -j ACCEPT
-A input -s 200.33.79.237 53 -d 0/0 -p udp -j ACCEPT
-A input -s 0/0 53 -d 0/0 -p udp -j ACCEPT
-A input -s 0/0 -d 0/0 -p tcp -y -j REJECT
-A input -s 0/0 -d 0/0 -p udp -j REJECT

Do you know a tool that will allow me to do such conversion? Any other
tool more new-iptables-user intuitive?

Thank you :)

Alex.

-- 
ˇSé libre, usa software libre!
Be free, use free software!
http://www.imoqland.com/



-- 
Psyche-list mailing list
Psyche-list@redhat.com
https://listman.redhat.com/mailman/listinfo/psyche-list

[Index of Archives]     [Fedora General Discussion]     [Red Hat General Discussion]     [Centos]     [Kernel]     [Red Hat Install]     [Red Hat Watch]     [Red Hat Development]     [Red Hat 9]     [Gimp]     [Yosemite News]

  Powered by Linux