Guarddog

[Collins]

On Monday 22 December 2003 11:53, Tim Wunder wrote:
> On Monday 22 December 2003 2:47 pm, someone claiming to be Collins wrote:
> > On Monday 22 December 2003 09:51, Tim Wunder wrote:
> > > Does anybody here use/recommend guarddog as a firewall configuration
> > > tool? I've tried firestarter (there's an RPM available for Fedora) but
> > > I can't seem to get it to work the way I want. If I use firestarter to
> > > block port 80, it allows me to force the use of my squid proxy, but it
> > > also renders my webserver useless. I need something that will block
> > > outgoing port 80 while allowing incoming port 80 communication. At
> > > least that's what I think I need...
> >
> > I have limited experience with firewalls, but I use Shorewall - very
> > simple to setup, and yes it does allow you to distinguish between
> > incoming and outgoing requests by port, ip address ranges, etc.  There is
> > an RPM available, and I've just applied it to SUSE 9.0 with no problems.
>
> Since there is an RPM available for shorewall, I installed it.
>
> Looks like there's no GUI for it ('cept webmin, which I don't feel like
> installing.) Oh well, guess it won't hurt to give CLI configurin' a try...
>

Just go to www.shorewall.net and get one of the sample parameter sets.  Follow 
the shorewall quickstart guides.

-- 
Collins