what's a good firewall?

[curtis e. bear]

Does anyone use a firewall other than shorewall, and if so, what is it? Shorewall is completley messing up my interenet sharing, i think, plus it's settings are pretty general.

 

 

Running Mandrake 10.1

[Guest anon]

I recommend and use rc.firewall. Its designed for Linux workstations, routers, and servers, and ofcourse works on desktops.

http://projectfiles.com/firewall/

[phunni]

The firewall anon recommended is good, I've used that - but I'm currently using arno's firewall which I would highly recommend...

[kristi]

I use firestarter rel 1.

 

Guarddog is good but dumps all output to syslog with no way to easily check what you want to see.

Hope you find joy.

Kristi

[phunni]

firestarter is very good - I've also used that in the past. It does really require you to use X though - which may be fine and, if you find shorewall pretty general, then you will find much the same in firestarter imho...

[paul]

I'd recommend shorewall.

But I wouldn't use the GUI to configure it. I edit the files directly

[aioshin]

when you finished your firewall, try to go to this link http://www.grc.com/default.htm

and click the shieds up to check your systems security. It will scan your pc from that site, and will give a summary of what had been done...

[kristi]

firestarter is very good - I've also used that in the past.  It does really require you to use X though - which may be fine and, if you find shorewall pretty general, then you will find much the same in firestarter imho...

<{POST_SNAPBACK}>

 

In what way does it require me to use X? Or should I say, "what's X"???

Kristi

[Ixthusdan]

when you finished your firewall, try to go to this link http://www.grc.com/default.htm

and click the shieds up to check your systems security. It will scan your pc from that site, and will give a summary of what had been done...

<{POST_SNAPBACK}>

 

Stealth with windows and linux. How? two layered firewall. Just hardware in linux and sygate with hardware in windows.

[tyme]

firestarter is very good - I've also used that in the past.  It does really require you to use X though - which may be fine and, if you find shorewall pretty general, then you will find much the same in firestarter imho...

<{POST_SNAPBACK}>

 

In what way does it require me to use X? Or should I say, "what's X"???

Kristi

<{POST_SNAPBACK}>

X is a graphical server, specifically in mandrake 10.1 you'll have X.org - it's what draws the GUI on your screen. specifically, for firestarter you have to have some parts of the gnome desktop installed (i.e. gtk2). It should be in the Mandrake repo's, and makes setting up a firewall very easy.

[kristi]

X is a graphical server, specifically in mandrake 10.1 you'll have X.org - it's what draws the GUI on your screen. specifically, for firestarter you have to have some parts of the gnome desktop installed (i.e. gtk2). It should be in the Mandrake repo's, and makes setting up a firewall very easy.

 

Oh, yeah, I vaguely remember that. But it's all automatic so it simply doesn't mater.

Krsiti

[Guest Willard1975]

Don't forget MonMotha's IPTABLES script. Maybe not so easy but higly customizable. Most configuration is done in the beginning of the script and is explained pretty good. There's a mailing list and WIKI so the support is fairly good. Have been using it for the last two years and have had little problems.

 

http://monmotha.mplug.org/firewall/index.php

 

/Willard.

[ianw1974]

I have a hardware firewall that runs Linux Coldfire, and that works quite well. However, as it's a hardware firewall, it's totally separate from my Linux installations, so means I have more resources free on my system for other things! :D

[solarian]

HAHAHAHAHA

Unable to connect with NetBIOS to your computer.

All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.

 

suckers!

tested my pc through shields-up with all their tests (not just the Windows specific one :D)

all is stealthed apart from one port that reports as closed*

Running Shorewall (that came with mdk) with some ports open for file sharing, everything else is on lockdown.

 

* 113

IDENT

Closed Your computer has responded that this port exists but is currently closed to connections.

Edited May 5, 2005 by solarian

[adamw]

...or you could always just have someone nmap you, a little more comprehensive and less tainted with Steve Gibson Marketing Exclamation Marks!!!!!!!!!!!