Re: default firewall/IDS that comes with DEBIAN

[andreimpopescu@gmail.com (Andrei Popescu)]

On Thu, Dec 21, 2006 at 09:25:44AM -0500, mutsuura wrote:
> All
> 
> Another newbiew question...
> 
> While browsing my auth.log file, I notice 'many' denial attacks.
> 
> Eg:...
> 
> Dec 17 12:25:37 h-66-166-247-242 sshd[21409]: Illegal user sara from 61.82.25.83
> Dec 17 12:25:39 h-66-166-247-242 sshd[21412]: Illegal user robert from 61.82.25.83
> Dec 17 12:25:41 h-66-166-247-242 sshd[21415]: Illegal user richard from 61.82.25.83
> Dec 17 12:25:43 h-66-166-247-242 sshd[21418]: Illegal user party from 61.82.25.83
> Dec 17 12:25:45 h-66-166-247-242 sshd[21420]: Illegal user amanda from 61.82.25.83
> Dec 17 12:25:46 h-66-166-247-242 sshd[21423]: Illegal user rpm from 61.82.25.83
> Dec 17 12:25:48 h-66-166-247-242 sshd[21426]: Illegal user operator from 61.82.25.83
> Dec 17 12:25:50 h-66-166-247-242 sshd[21428]: Illegal user sgi from 61.82.25.83
> Dec 17 12:25:54 h-66-166-247-242 sshd[21434]: Illegal user users from 61.82.25.83
> Dec 17 12:25:56 h-66-166-247-242 sshd[21437]: Illegal user admins from 61.82.25.83
> Dec 17 12:25:58 h-66-166-247-242 sshd[21439]: Illegal user admins from 61.82.25.83
> Dec 17 12:26:08 h-66-166-247-242 sshd[21453]: Illegal user shutdown from 61.82.25.83
> 
> What default firewall/IDS does Debian come with following an initial install?
> 
> Note: during install I selected all major components and did not include any additional 
> packages wile installer was running aptitude.

AFAIK there is no default firewall.

I always recommend shorewall because it is very powerful, but pretty
easy to setup. If you prefer a graphical one than firestarter is also a
good choice.

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)