Re: firewall

[Brian <ad44@cityscape.co.uk>]

On Wed 04 Jul 2012 at 11:19:06 +0800, lina wrote:

> I don't know which firewall (http://wiki.debian.org/Firewalls) I
> should choose.
> 
> Thanks ahead for recommendation, and it will be very nice if you tell
> me why you recommend this one.

You can either manipulate netfilter directly with iptables or have
something else (like the suggested ufw or gufw) do it for you. using
iptables is not for the faint hearted.

Alternatively, you could detail why you need a firewall. The only reason
you have given up to now is fear. This leads to strange things being
done: for example, your 'iptables -L' output in another post shows
connections to a webserver and sshd being accepted from anywhere, as are
ICMP requests. Nothing wrong with that. But why bother with an iptables
rule if that is what you had in the first place?