Hello all, I am about to build a firewall for my home network which will have a broadband connection. After much investigation I have decided to use RedHat (8 or 9) as a software firewall. I will be installing it on an old PC I have (400Mhz AMD K63, 96MB, 20GB HD, GF2) and will be dedicated as a firewall. Has anyone done this already and have a sample iptables entry they can share with me? My ultimate goal is to be able to log onto my XP machine at home from any computer that has an internet connection. I plan to use VNC and tunnel this through Open SSH connection for security. Therefore, I believe that I will only need to have one ssh port open to the internet. If anyone can share any knowledge about this then please let me know. Thanks in advance. Steve
On Sat, 2003-04-05 at 21:03, SWilkes wrote:> Hello all, > > I am about to build a firewall for my home network which will have a > broadband connection. After much investigation I have decided to use > RedHat (8 or 9) as a software firewall. I will be installing it on an > old PC I have (400Mhz AMD K63, 96MB, 20GB HD, GF2) and will be dedicated > as a firewall. Has anyone done this already and have a sample iptables > entry they can share with me?Since you have a system that''s certainly chuggy enough to run X, I''d suggest firestarter.sourceforge.net I have it at a couple of locations and is a dead easy package to make a box firewall a bunch of windaz machines. nat is easy, port forwarding is easy.... u get my point :) other non-graphical options include rc.firewall script and mon-motha. I''ve never had much experience with them though.> > My ultimate goal is to be able to log onto my XP machine at home from > any computer that has an internet connection. I plan to use VNC and > tunnel this through Open SSH connection for security. Therefore, I > believe that I will only need to have one ssh port open to the internet. > If anyone can share any knowledge about this then please let me know.Again something not tried by me, but I believe you will require two (assuming you want sshd functionality also). Normal ssh runs on your firewall (22) and another listening on say 1080, pushed to 5900 inside your local network.> > Thanks in advance. > > Steveda!!as, rhct quicksprint internet sunshine coast, qld
/sbin/iptables -A INPUT -p tcp --syn --destination-port 22 -j ACCEPT /sbin/iptables -A INPUT -p tcp --syn -j DROP SWilkes <sw@dba100.co.uk> wrote: Hello all, I am about to build a firewall for my home network which will have a broadband connection. After much investigation I have decided to use RedHat (8 or 9) as a software firewall. I will be installing it on an old PC I have (400Mhz AMD K63, 96MB, 20GB HD, GF2) and will be dedicated as a firewall. Has anyone done this already and have a sample iptables entry they can share with me? My ultimate goal is to be able to log onto my XP machine at home from any computer that has an internet connection. I plan to use VNC and tunnel this through Open SSH connection for security. Therefore, I believe that I will only need to have one ssh port open to the internet. If anyone can share any knowledge about this then please let me know. Thanks in advance. Steve --------------------------------- Yahoo! Mobile - Check & compose your email via SMS on your Telstra or Vodafone mobile.