You are not logged in.

#1 2010-10-06 14:18:49

evot
Member
From: Finland
Registered: 2010-02-26
Posts: 96

Few questions about iptables

Could someone clarify few things considering iptables..

1. I have made script for setting few options for iptables.
   What is best way to get those options running on each startup?
   Do i need to set that script executed on each start or is there some other ways to do that?

2. Can i "easily" configure my existing iptable with firewall builder (fwbuilder)
   or is there some more suitable program for that?

3. If i want to return my default Arch setting for security, is it so simple as removing iptables?
   In this kind of situtation i don't want to leave any open holes with my iptable practise.

Hopefully i can get some nice firewall running. smile

Lets add that my computers are just normal desktop/netbook with KDE on both.

Offline

#2 2010-10-06 14:28:42

Inxsible
Forum Fellow
From: Chicago
Registered: 2008-06-09
Posts: 9,183

Re: Few questions about iptables


Forum Rules

There's no such thing as a stupid question, but there sure are a lot of inquisitive idiots !

Offline

#3 2010-10-06 14:41:54

evot
Member
From: Finland
Registered: 2010-02-26
Posts: 96

Re: Few questions about iptables

Thats mostly for creating script/options..

Is that IPTABLES_CONF=/etc/iptables/iptables.rules right plase to put my configurations??

What about questions 2 and 3 ??

If someone have experience with fwbuilder and returning defaults after uninstalling iptables i would appreciate some information about those.

Last edited by evot (2010-10-06 14:43:07)

Offline

#4 2010-10-06 18:05:27

evot
Member
From: Finland
Registered: 2010-02-26
Posts: 96

Re: Few questions about iptables

Ok

One thing that i didn't notice was using iptables-save.
That was my key to get iptables working properly.

But no luck yet with integrating iptables and firewall builder.

At least i got somekind of firewall up and running. It's good place to start. smile

Offline

#5 2010-10-06 22:21:14

fukawi2
Ex-Administratorino
From: .vic.au
Registered: 2007-09-28
Posts: 6,237
Website

Re: Few questions about iptables

evot wrote:

1. I have made script for setting few options for iptables.
   What is best way to get those options running on each startup?
   Do i need to set that script executed on each start or is there some other ways to do that?

Use `/etc/rc.d/iptables save` and add 'iptables' to your DAEMONS array in rc.conf
This will save your rules to /etc/iptables/iptables.rules and load then at boot time.

evot wrote:

3. If i want to return my default Arch setting for security, is it so simple as removing iptables?
   In this kind of situtation i don't want to leave any open holes with my iptable practise.

Running `/etc/rc.d/iptables stop` will remove all rules you've made.

Offline

#6 2010-10-07 17:39:09

evot
Member
From: Finland
Registered: 2010-02-26
Posts: 96

Re: Few questions about iptables

Thank you fukawi2 smile

It's nice to know that it's possible to get everything back to normal, if something goes wrong.

Somehow i found firewall builder quite hard to use for this, so maybe it's just better stick with pure iptables and learn how to use them properly.

Offline

#7 2010-10-07 21:48:51

fukawi2
Ex-Administratorino
From: .vic.au
Registered: 2007-09-28
Posts: 6,237
Website

Re: Few questions about iptables

evot wrote:

Somehow i found firewall builder quite hard to use for this, so maybe it's just better stick with pure iptables and learn how to use them properly.

That's my preference, which is why I couldn't answer question 2 for you wink

Offline

Board footer

Powered by FluxBB