Re: setting up iptables

[Lars Ellenberg <l.g.e@web.de>]

/ 2004-03-04 17:14:50 +0200
\ Costas Magkos:
> Hi all,
> 
> Can someone give me some best-practices for setting up iptables on a 
> Debian system? I'm looking for things like where should the rules be 
> placed, what startup script to use [1], good configuration tools [2] and 
> so on. URLs are appreciated, I dont mind reading :-)
> 
> I'm currently setting up iptables on a single-server enviroment (no 
> routing), but since I will be using iptables a lot, general concepts are 
> also welcome.

If you like editing config files more than clicking some colorful frontend,
you may want to have a look at SuSEfirewall2 by Marc Heuse.
[Note the "2". And, btw, current version of it is 3.1 :)]

This is "only" a bash script wrapper for iptables
with a well commented configuration file.
It should work with little effort on Debian, too.

I like it. Much brainwork went in it. I'd love to see something
similar (based on it?) in Debian.

AFAIK, the most recent version
can be found here, and on the suse mirrors of course:
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/noarch/SuSEfirewall2.rpm
(I don't know of any tgz, sorry,
 but there is rpm2cpio * | cpio --extract --make-dir )

	Lars Ellenberg