[ILUG] Am I being persecuted?

[Barry O'Donovan]

On Tuesday 19 October 2004 13:37, Timothy Murphy wrote:
> However, I just followed the model in the shorewall "two-interfaces"
> setup. I must say I don't understand the resulting iptables listing:

Two interfaces? I don't use shorewall so I'm guessing here. But "two 
interfaces" means to me that you have two network cards on your 
computer. There are various reasons for having two network cards and 
I'm sure you have yours :) 

> =======================================
> [root at alfred shorewall]# iptables -L
> Chain INPUT (policy ACCEPT)
               ^^^^^^^^^^^^^


Aggghhhhhhhhhh! Your default policy is to allow EVERYTHING through 
unless there's a rule to DROP. But you have no more rules on the INPUT 
chain so EVERYTHING is getting through.

> This seems very open to me.

You can say that again. You'd better reconfigure shorewall (and as I 
said I don't use it) or set-up iptables manually. It's not that 
difficult - honest. See:

http://www.linux.ie/articles/tutorials/firewall/

Even if you still want to use shorewall, this will give you the basics 
of iptables which will help you configure shorewall.

Regards,
Barry

> --
> Timothy Murphy
> e-mail (<80k only): tim /at/ birdsnest.maths.tcd.ie
> tel: +353-86-2336090, +353-1-2842366
> s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

-- 
Regards,
Barry O'Donovan
http://www.barryodonovan.com/

|-------------------------------------------------------------------|
|          http://www.ihl.ucd.ie/ | http://www.openhosting.ie/      |
|  Information Hiding Laboratory, | Open Hosting, Dublin, Ireland   |
| Department of Computer Science, |                                 |
|      University College Dublin, | Specialists in web hosting, web |
|     Belfield, Dublin 4, Ireland | design, e-commerce and CMSs     |
|-------------------------------------------------------------------|

Public key: http://www.barryodonovan.com/gpg.asc

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.linux.ie/pipermail/ilug/attachments/20041019/5f9dfe0c/attachment.pgp