Re: Best Linux Firewall?

From: Baho Utot (baho-utot_at_philippnies-island.org)
Date: 01/07/04


Date: Wed, 07 Jan 2004 00:01:08 GMT

ik < > wrote:

> On Sun, 28 Dec 2003 19:24:55 -0800, the right honourable "Paul
> Osterhues" <<a
>
href="mailto:&#108;&#51;&#50;&#49;&#52;&#64;h&#111;&#116;&#109;&#97;&#105;&#108;.&#99;&#111;&#109;">&#108;&#51;2&#49;&#52;&#64;&#104;&#111;&#116;&#109;&#97;i&#108;&#46;&#99;&#111;m</a>>
> wrote:
>
>>Hi -
>>
>>
>>
>>What is the best Linux firewall script\program, or secure distro? I have
>>been hacked twice, once with a three line masquerade script and another
>>time with a NAT script and basic firewall. The first time I was hacked it
>>brought my Linux router to its knees at the kernel level and rendered a
>>workstation unusable. I had an NFS share with Red Hat 6.2, and I think it
>>was that. The second time I was hacked, with Red Hat 9, the gateway was
>>fine, but then my printer drivers were rendered inoperable, and when I
>>checked the system logs (XP) he also got access to my registry (Needless
>>to say, the remote registry service was turned on) to move some icons
>>around and change display settings. I think that the reason this happened
>>was that the NetBIOS was turned on. Any ideas to combat this? I think that
>>this guy will try again, and I need to be prepared for it. I don't know
>>how to check if he has internal access still (I installed another
>>rudimentary firewall). Any ideas?
>>
>
> combination of IPTables and knowledge.
>
> http://www.realworldlinuxsecurity.com/
>
> got a nice script there.
> if you want my version of it... gimme a holler
>
>
> frgr
> Erik

Lay it on me!



Relevant Pages

  • iptables script migration from Red Hat 9 To Fedora Core 4
    ... I'm working towards replacing an old firewall box with a new one. ... old box runs Red Hat Linux 9. ... I have an iptables script that works well ...
    (Fedora)
  • Re: Best Linux Firewall?
    ... >What is the best Linux firewall script\program, ... >with a NAT script and basic firewall. ... >he also got access to my registry (Needless to say, the remote registry ...
    (comp.os.linux.security)
  • Re: Best Linux Firewall?
    ... > with a NAT script and basic firewall. ... > my Linux router to its knees at the kernel level and rendered a workstation ... I had an NFS share with Red Hat 6.2, and I think it was that. ...
    (alt.os.linux)
  • Re: i dont think anyone here actually runs Liinux as a client with an iptable firewall
    ... > I'm beginning to think no one actually runs a Linux firewall with an ISP ... script, just grep and cut the output of "ifconfig ethX" -- or better, ...
    (comp.os.linux.security)
  • Re: RFC: my firewall ruleset(s)
    ... IPFW numbers rules that increment by 1. ... > The reasoning behind this is so I have a single firewall script for all ... Depending on the rc.conf entries on that server, the firewall ...
    (freebsd-questions)