Home ›

Starting a Linux Firewall from Scratch

Issue 156

From Issue #156
April 2007

Apr 01, 2007  By Dinil Divakaran
 in
The first steps in getting started with iptables.
______________________

Comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

error

sam9's picture
Submitted by sam9 (not verified) on Tue, 08/03/2010 - 00:53.

ther eis probably a mistake in the file:
/sbin/iptables -A FORWARD -m state --state \

I will try to get my head

JohnstonS's picture
Submitted by JohnstonS on Tue, 10/09/2007 - 07:25.

I will try to get my head around this and code my own little thing soon i think. Johnston @ webwurzel.de

It would work but not well setup.

Anonymous's picture
Submitted by Anonymous (not verified) on Tue, 03/20/2007 - 15:59.

The method of setting up this firewall would probably work fine, but for a beginner's guide to setting up a firewall I think that this glossed over too many details and outright left some unanswered.

It looks like the author set up this firewall in this manner because he didn't have access to the router. Why else would you setup proxy arp instead of just routing the protected network to the firewall? He also refers to the untrusted segment of his network as public network, and then mentions that for some that would be the Internet. He used non-routable IP space behind his firewall but then didn't mention that if you also did this you would need to do NAT.

I like the article because it explained how to set up a Linux box to be a firewall with needing to install a GUI for it, but I think that it used a poor example for what a typical network layout would be.

Clarifications

Dinil Divakaran's picture
Submitted by Dinil Divakaran on Mon, 04/09/2007 - 12:44.

Yes, I did forget to mention the connection to the outside world properly. It can be either through a server with a global address running a squid, or even some technique using NAT - Sorry that I missed these points.

I was majorly referring to a large campus-kind-of network where one would like to protect his/her smaller LAN.

Excellent Writeup on IPTables

Austin's picture
Submitted by Austin on Mon, 03/19/2007 - 03:03.

Divakaran this is a very good write up on iptables,Good and very practical example for a small setup.

Is it possible to expand this article and to add transparent proxy server using squid , as in a small setup its very common to have a linux Router/Gateway with proxy server.

Thanks
Austin

Thanks. I should have added

Dinil Divakaran's picture
Submitted by Dinil Divakaran on Mon, 04/09/2007 - 12:47.

Thanks.

I should have added those details here; I will try to come up with another one, as and when time permits.

Webcast
More Resources
How to Build an Optimal Hadoop Cluster to Store and Maintain Unlimited Amounts of Data Using Microservers

Realizing the promise of Apache® Hadoop® requires the effective deployment of compute, memory, storage and networking to achieve optimal results. With its flexibility and multitude of options, it is easy to over or under provision the server infrastructure, resulting in poor performance and high TCO. Join us for an in depth, technical discussion with industry experts from leading Hadoop and server companies who will provide insights into the key considerations for designing and deploying an optimal Hadoop cluster.

Learn More

Sponsored by AMD

White Paper
More Resources
Private PaaS for the Agile Enterprise

If you already use virtualized infrastructure, you are well on your way to leveraging the power of the cloud. Virtualization offers the promise of limitless resources, but how do you manage that scalability when your DevOps team doesn’t scale? In today’s hypercompetitive markets, fast results can make a difference between leading the pack vs. obsolescence. Organizations need more benefits from cloud computing than just raw resources. They need agility, flexibility, convenience, ROI, and control.

Stackato private Platform-as-a-Service technology from ActiveState extends your private cloud infrastructure by creating a private PaaS to provide on-demand availability, flexibility, control, and ultimately, faster time-to-market for your enterprise.

Learn More

Sponsored by ActiveState