Security :: Configure A Spare Pc As A Firewall?
Jul 16, 2010How do I configure a spare pc as a firewall for my home and what distro would I use?
View 1 RepliesHow do I configure a spare pc as a firewall for my home and what distro would I use?
View 1 RepliesI am novice user of linux. I need to know how to configure firewall so my system cant be compromised...In windows my system was greatly compromised. keyloggers were installed without my approval and my desktop was taken on remote. What should I do so without my knowledge no software can be installed and i can close all ports and only open which ever port is required to open. What should i do so my desktop cant be taken on remote?How do I configure user rights ? So except me no one can install any software. I will have another general user id for internet surfing
View 3 Replies View RelatedI am novice user of linux. I need to know how to configure firewall so my system cant be compromised...In windows my system was greatly compromised. keyloggers were installed without my approval and my desktop was taken on remote.What should I do so without my knowledge no software can be installed and i can close all ports and only open which ever port is required to open. What should i do so my desktop cant be taken on remote?How do I configure user rights? So only root and one admin can install softwares and no one else.
View 5 Replies View RelatedI want configure open source firewall on my office for websites blocking and bandwidth monitoring.
which is the beast free open source firewall..
Can we use iptables as firewall instead of Juniper firewall
View 2 Replies View RelatedI have a Suse11 box with 2 network cards:
I have squid as a proxy on the Suse box, and with the default firewall I have to enable masquerading to allow clients on the eth3:1-3 to send and receive mail through the Suse box. I found the Suse firewall completely inadequate (all P2P software/connections are allowed once you enable masquerading) and had to install ConfigServer Security & Firewall. In die configuration of csf I could get my way around getting smtp to work for the eth3:1-3 clients, but pop3 connections does not go through the box. I know I need to allow port 110 and 995 to masquerade of NAT (or something) and then the same for port 22
I tried installing F-prot's linux scanner but it doesn't seem to want to install and I am tired of messing with it.
So I am wondering if I even need it or if there is something else.
I am behind a firewall already with my router if that helps any.
I guess I am having trouble understanding why virus protection is less necessary.
Do people not write viruses for linux systems?
Which is the best firewall in ubuntu10.10 and how to configure it so that hackers do not get access to my computer, I also do use torrent.
View 4 Replies View RelatedHow do I configure the firewall? Is there a firewall or do I have to install one? I cant find a app anywhere in the menu. Running 10.10
View 5 Replies View Relatedhow to configure my firestarter firewall. I have a website which requires the port 1935 to be open. I figured out how to open the port using firestarter. Is there anyway to make the port open only to this website, and not to every other website for security reasons of course.
View 4 Replies View RelatedI'm looking forward to the release of openSUSE 11.4, which I'm looking to install as an Internet facing gateway on a mini-ITX machine with 2 Ethernet cards. As such I've been reading up on the YaST Firewall trying to find out to configure it, and there's one thing I'd like to be able to do: 'stealth' all the firewall ports.
In other words, if someone were to hypothetically do a port scan of my external IP address, I would rather they not know whether any of the ports on my gateway are open or closed, so instead of replying with the status of those ports the packets get dropped. I've been able to do this with a product called Astaro Security Gateway, which I currently have installed on a second hand Dell Optiplex machine, but I am now looking into the possibility of installing this as a virtual machine inside an openSUSE 11.4 host (extra level of security) and would like the same functionality for the host OS.
I am encountering problems to configure my firewall (through iptables) to allow apt-get features, like update and install.I have the latest debian server running in a virtual machine in my windows xp and therefore I have two interfaces in this debian server:- NAT Interfaceinet: 10.0.2.15- Host Only Interfaceinet: 192.168.56.101So far my iptable rules drop all packets for default, in exception icmp and ssh that I allow to ping and connect from my windows xp. Both of them I use only the Host interface (192...) to connect to another 192... interface on my windows.
Those are working fine, but apt is not. I know, in this very moment it shouldn't. But I made a lot of attempts trying to configure the iptables allow connections through the 80 and 21 ports from/to NAT and Host. I think I made all possible combination (or not, because it didnt work). But I'm wondering if someone more experient can help me solve this problem.
I need to restrict access to the internet and keep unwanted software out of LAN with 45 workstations at the school I teach at. I thought about configuring a proxy and firewall on SuSE 11.4?
View 9 Replies View Relatedi want to configure firewall in ubuntu 9.10...
View 2 Replies View RelatedI'm stuck at server with OpenNA installed, which has no relation with CentOS but If anyone knows GIPTABLES firewall to point me somewhere I can get configuring.I need to open 2 custom ports but I just can't get it to work.
View 2 Replies View RelatedI've got my server mostly configured with Samba file shares - I can access from Linux and OSX computers. I've enabled Samba Clietn and Sambar server in the openSUSE firewall settings (on the server), but Windows 7 can't seem to connect. I've been trying to tweak registry keys in Windows and such, but had no luck. However, when I turned off the firewall on the server, I was instantly able to connect. Is there some other service or port I need to open for Windows 7?
View 4 Replies View RelatedI have tried various rules, like opening port 53 for the DNS with little success. I finally figured that you need to set the source port to 53 and NOT the destination port.However, I have been unable to figure out what ports apt-get requires. The only way I get it to work is to accept everything in iptables.
View 1 Replies View RelatedI have centos with software firewall enable , but i want to set up hardware firewall can anybody guide how to install and configure hardware firewall in centos
View 3 Replies View RelatedI have a question about telnet.Is there any way to configure a telnet server without disable firewall.I am using redhat 5.2 and fedora 12.I have lack of knowledge about firewall.
View 1 Replies View Relatedhow to setup centos to act as router and firewall at our office i just installed the os now i dont know where to go from here i have all the isp adresses,dns and gateway any assistance coz am really interested in learning linux thanxs iused some instructions on this site [URL] and when i try the /sysctl.config on my terminal now i get the message permission denied
View 5 Replies View RelatedI am running a centOS 5.5 server and can't synchronize with time servers via ntpd. My server sits behind a firewall with only port 80 open and I suspect this is the issue. Do I need to open other ports to connect to the time servers at [URL]?
View 4 Replies View RelatedI've searched a lot across the web and this forum in particular, but wasn't able to find the solution. The settings of the firewall are too cryptic to me. When the firewall is turned off everything is OK, but it is uncomfortable to turn it on and off every time I watch IPTV.
View 8 Replies View RelatedI have a work desktop plugged into the work network. As I opened my firewall settings I noticed that it is turned off. My question is how should I configure it? I saw that the interface isn't assigned to any zone... I should assign to internal zone and open some port that I need in order to work? There are some guidelines for configuring the firewall?
View 2 Replies View RelatedI have a server machine that is running SUSE Linux Enterprise Server 11. I set up a mysql server there. Now I want to access this mysql server from my laptop. I used the following command,
> mysql -h 12.246.5.70 -u davidehs -p
I found if the firewall on the server machine is running, I can not connect the mysql server from my laptop. If I stop the firewall first, and the do the connection, I can access the mysql. how to keep the firewall running and allow the remote mysql incoming requests?
I have a server machine that is running SUSE Linux Enterprise Server 11. I set up a mysql server there. Now I want to access this mysql server from my laptop. I used the following command,
> mysql -h 12.246.5.70 -u davidehs -p
I found if the firewall on the server machine is running, I can not connect the mysql server from my laptop. If I stop the firewall first, and the do the connection, I can access the mysql. Do you guys have any idea how to keep the firewall running and allow the remote mysql incoming requests?
i want set up IDS(Intrusion detection system) and Firewall in my home just for learning.. The Goal is learn IDS log and Firewall log..
View 4 Replies View RelatedI have a desktop computer running Debian Lenny, a 56 K modem, and a dial-up account, currently configured like this: computer -> modem -> UPS -> phone jack
When I run off a Knoppix live CD, I can use kppp to configure pppd (using PAP/CHAP authentication and hardware control flow) to dialup and surf. When I try to user kppp to configure pppd exactly the same way on my hard drive installation, I get nothing. Both my Knoppix live CD and Debian Lenny use exactly the same version of kppp, but the pppd related files in /etc/ppp look a bit different.
Under both Knoppix and Debian Lenny hard drive installation, when I try to connect, the login debug window of kppp shows:
Code:
ATZ
OK
ATM1L1
OK
ATDT [phone number]
At this point I hear the modem dialing out, and when using Knoppix, after a few seconds I see
Code:
Which I think corresponds to my route to the InterNet being established through my ISP. When using the hard drive install, I never see the CONNECT, and all indications are that my modem is not sending authentication information at all, but getting stuck right after dialing out, so that my ISP gets a phone call from a modem which... refuses to speak. I never had any problems before, so I am baffled.
So apparently my system is currently misconfigured in some way which prevents point to point protocol from getting out.
Questions:
I have a firewall on my computer which I set up using guarddog. I have enabled point to point protocol from internet zone to local zone. I know that ppp is a symmetrical protocol, but my understanding is that I do not need to enable point to point from local to internet zone. I have not enabled irc protocol because my understanding is that this is only relevant to software flow control using chat scripts. Does this sound correct? Is there some additional protocol I need to allow in order to use pppd to dial out?
When I reboot my computer (off the hard drive) I sometimes see that the system complaining about a failure to stop every process, and sometimes I see mention of an eth0.pid. I have been looking for lock files; would they all be in /var/run?
When I use kppp to configure pppd, I want to do that as my ordinary user for at least two reasons, correct? don't want to run pppd as root user for security reasons kppp is a GUI and root user can't use X (on Debian)
So I should see in home directory of my ordinary user
.kde/share/config/kppprc
.kde/share/apps/kppp
But not in /root directory, correct? What pppd related processes should I see with ps -ef if everything is working?
I have Ubuntu running on an old PE server. It is running Virtualbox with an instance of Ubuntu inside. The instance is there to run my honeypot.
The server box IP is192.168.1.10. The Virtualbox is bridged with it's own IP of 192.168.1.200. The honeypot daemon is listening to 192.168.1.201 with arpd.
I set up the UFW with DENY. And then enabled only the ports leading to the honeypot scripts which are abound to IP .201. I then forwarded the ports necessary to run VNC to .200.
Here is the UFW status:
buntu@ubuntu-desktop:/var/lib$ sudo ufw status
Status: active
To Action From
-- ------ ----
192.168.1.201 21/tcp ALLOW 21/tcp
192.168.1.201 4444/tcp ALLOW 4444/tcp
192.168.1.201 5544/tcp ALLOW 5544/tcp
[Code].....
Setting up firewall
View 12 Replies View RelatedUp until recently, as in a few days ago, I was using Ubuntu and had ufw managing the firewall.It's been "recommended" that iptables itself be used. Where do I do the rules go (as in a file) and how do I call those rules at startup?
View 6 Replies View Related