>>Shorewall is a set of shell scripts that write iptables rules based on
your
>>instructions. Once the rules are written, there is nothing else to do and
>>there is nothing left running; the iptables code does the actual
firewalling.
Ah..so I presume that firestarter and lokkit is the same.. (only there's a
GUI) and I presume also that shorewall has a Gui.
>>However, I notice that it's _Could_ only be configured for my LAN
interface,
>>what about my wifi interface? Do I _have_ to re-configure it each time I
>>start the wifi interface? Right now, I'm not even sure if the firewall's
up
>>for my wifi (eth1)
>Err... not sure I understand the question here. However, if it helps I have
>the following interfaces configured:
I _think_ the problem here is that my wifi card is _not_ plugged into the
lappy by default. as such, there's not eth1 to select.(?) All I see if eth0,
vmnet, lo (i think) and there's the option (talking about firestarter)
enable on dial-out (i presume this means ppp0)
So.. maybe I should try plugging in the eth1 (wifi card) and re-run
firestarter??
Please comment.
>> * eth0 to the internal home LAN
>>
>> * eth1 to my DMZ
>>
>> * eth2 to my wifi access point
So.. you've got 3 interefaces on 1 PC?? wow! DMz means firewall right?
Cheers, .^.
Mun Heng, Ow /V\
H/M Engineering /( )\
Western Digital M'sia ^^-^^
DID : 03-7870 5168 The Linux Advocate
-----Original Message-----
From: Rodolfo J. Paiz [mailto:rpaiz@xxxxxxxxxxxxxx]
Sent: Monday, October 06, 2003 3:28 PM
To: shrike-list@xxxxxxxxxx
Subject: Re: Which Firewall solutions
At 23:48 10/5/2003, you wrote:
> >>I am often heard on this list recommending Shorewall [...]
>
>Hmm....Is shorewall a complement to iptables? I'm just curious.. I've
gotten
>firestarter and the default lokkit..seems to be OK, I guess..
Shorewall is a set of shell scripts that write iptables rules based on your
instructions. Once the rules are written, there is nothing else to do and
there is nothing left running; the iptables code does the actual
firewalling.
>However, I notice that it's _Could_ only be configured for my LAN
interface,
>what about my wifi interface? Do I _have_ to re-configure it each time I
>start the wifi interface? Right now, I'm not even sure if the firewall's up
>for my wifi (eth1)
Err... not sure I understand the question here. However, if it helps I have
the following interfaces configured:
* ppp0 for dialing out to the Internet
* eth0 to the internal home LAN
* eth1 to my DMZ
* eth2 to my wifi access point
Rules can be created easily from any to any network or host as well as
default policies for each. Very cool stuff, and very easy to implement.
--
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx
--
Shrike-list mailing list
Shrike-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/shrike-list
--
Shrike-list mailing list
Shrike-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/shrike-list
