[solved] i don't want sw firewall

enihcam · 2011-07-31 11:58:03

I have a router firewall for my PC already, i don't want another sw firewall in my box. i need sshd to be working well as before i uninstall tcp_wrapper. i want all connections allowed including SSHD. any ideas?

Last edited by enihcam (2011-07-31 13:35:08)

litemotiv · 2011-07-31 12:00:34

This is a tricky one, but i would probably suggest to not install a firewall in that case..

enihcam · 2011-07-31 12:05:07

this is a fresh installation, and does not have firewall installed i guess. or please let me know which packages are about firewall?

litemotiv · 2011-07-31 12:23:56

enihcam wrote:

this is a fresh installation, and does not have firewall installed i guess.

Yes, so it basically already does what you require, or did i misunderstand your original question..?

Ramses de Norre · 2011-07-31 12:25:40

Install iptables and run

/etc/rc.d/iptables start
iptables -A INPUT -j ACCEPT
iptables -A OUTPUT -j ACCEPT
iptables -A FORWARD -j ACCEPT
/etc/rc.d/iptables save

Then add iptables to your daemons array. If you need this for ipv6 as well, do the same but s/iptables/ip6tables.

Does this solve the problem?

enihcam · 2011-07-31 13:05:42

litemotiv wrote:

enihcam wrote:
this is a fresh installation, and does not have firewall installed i guess.
Yes, so it basically already does what you require, or did i misunderstand your original question..?

to be simple:

Having removed tcp_wrapper, i cannot connect via SSH from other boxes anymore. I searched the forum, and i was told to install iptable. I don't understand. Do we have a solution that is without iptable?

If iptable is required, that means some firewall/filter modules have been existing already inside the kernel, doesn't it?

So my concern is, instead of installing iptable, how to turn those modules off?

enihcam · 2011-07-31 13:14:55

ignore this thread. i found the cause -- the damn dhcp renew the box ip. pls close it. sorry.

litemotiv · 2011-07-31 13:22:25

enihcam wrote:

ignore this thread. i found the cause -- the damn dhcp renew the box ip. pls close it. sorry.

That's okay, you can just mark your topic solved.

Arch Linux

#1 2011-07-31 11:58:03

[solved] i don't want sw firewall

#2 2011-07-31 12:00:34

Re: [solved] i don't want sw firewall

#3 2011-07-31 12:05:07

Re: [solved] i don't want sw firewall

#4 2011-07-31 12:23:56

Re: [solved] i don't want sw firewall

#5 2011-07-31 12:25:40

Re: [solved] i don't want sw firewall

#6 2011-07-31 13:05:42

Re: [solved] i don't want sw firewall

#7 2011-07-31 13:14:55

Re: [solved] i don't want sw firewall

#8 2011-07-31 13:22:25

Re: [solved] i don't want sw firewall

Board footer