Re: Firewall

--0-1935869151-1055003334=:73001
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

/sbin/iptables -A INPUT -p tcp --syn --destination-port 22 -j ACCEPT
/sbin/iptables -A INPUT -p tcp --syn -j DROP


SWilkes <[email protected]> wrote:

Hello all,

 

I am about to build a firewall for my home network which will have a broadband connection. After much investigation I have decided to use RedHat (8 or 9) as a software firewall. I will be installing it on an old PC I have (400Mhz AMD K63, 96MB, 20GB HD, GF2) and will be dedicated as a firewall. Has anyone done this already and have a sample iptables entry they can share with me?

 

My ultimate goal is to be able to log onto my XP machine at home from any computer that has an internet connection. I plan to use VNC and tunnel this through Open SSH connection for security. Therefore, I believe that I will only need to have one ssh port open to the internet. If anyone can share any knowledge about this then please let me know.

 

Thanks in advance.

 

Steve





---------------------------------
Yahoo! Mobile
- Check & compose your email via SMS on your Telstra or Vodafone mobile.
--0-1935869151-1055003334=:73001
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

<DIV>/sbin/iptables -A INPUT -p tcp --syn --destination-port 22 -j ACCEPT<BR>/sbin/iptables -A INPUT -p tcp --syn -j DROP<BR><BR><BR><B><I>SWilkes &lt;[email protected]&gt;</I></B> wrote:
<BLOCKQUOTE style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">
<META content=Word.Document name=ProgId>
<META content="Microsoft Word 10" name=Generator>
<META content="Microsoft Word 10" name=Originator><LINK href="cid:[email protected]" rel=File-List>
<STYLE>
<!--
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{mso-style-parent:"";
	margin:0cm;
	margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:12.0pt;
	font-family:"Times New Roman";
	mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;
	text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline;
	text-underline:single;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	mso-style-noshow:yes;
	mso-ansi-font-size:10.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Arial;
	mso-ascii-font-family:Arial;
	mso-hansi-font-family:Arial;
	mso-bidi-font-family:Arial;
	color:windowtext;}
span.SpellE
	{mso-style-name:"";
	mso-spl-e:yes;}
span.GramE
	{mso-style-name:"";
	mso-gram-e:yes;}
@page Section1
	{size:595.3pt 841.9pt;
	margin:72.0pt 90.0pt 72.0pt 90.0pt;
	mso-header-margin:35.4pt;
	mso-footer-margin:35.4pt;
	mso-paper-source:0;}
div.Section1
	{page:Section1;}
-->
</STYLE>

<DIV class=Section1>
<P class=MsoNormal><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Hello all,<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">I am about to build a firewall for my home network which will have a broadband connection. After much investigation I have decided to use <SPAN class=SpellE>RedHat</SPAN> (8 or 9) as a software firewall. I will be installing it on an old PC I have (400Mhz AMD K63, 96MB, 20GB HD, GF2) and will be dedicated as a firewall. Has anyone done this already and have a sample <SPAN class=SpellE>iptables</SPAN> entry they can share with me?<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">My ultimate goal is to be able to log onto my XP machine at home from any computer that has an internet connection. I plan to use VNC and tunnel this through Open SSH connection for security. Therefore, I believe that I will only need to have one <SPAN class=SpellE><SPAN class=GramE>ssh</SPAN></SPAN> port open to the internet. If anyone can share any knowledge about this then please let me know.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Thanks in advance.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Steve<o:p></o:p></SPAN></FONT></P></DIV></BLOCKQUOTE></DIV><p><br><hr size=1>
<a href="http://au.rd.yahoo.com/mail/tagline/?http://au.mobile.yahoo.com/sms/mail/index.html" target=_blank><b>Yahoo! Mobile</b></a><br>
- Check & compose your email via SMS on your Telstra or Vodafone mobile.
--0-1935869151-1055003334=:73001--