[Shorewall-users] newbie question

Tom Eastep
Sun, 13 Oct 2002 16:27:42 -0000

Tom Eastep wrote:
>
>
> Wai Yung wrote:
>
>> Hi,
>>
>> It seems that the mdk package doesn''t have any dependencies.
But I do
>> think
>> it''s a good idea to back up and upgrade.  Since MDK''s
control center
>> program
>> (drakconf) also plays with the config files.  The problem I have with
>> drakconf
>> is it''s not flexible.  You either select the few services it
lists to
>> disable/
>> enable or specify the protocol and port yourself. (and it
won''t even
>> show you
>> which ports you specified afterward.)
>>
>> On the other hand, Tarax suggested that I should have another network
>> card
>> to serve the local network.  (so I can specify eth0 to zone
''net'' and
>> eth1
>> to zone ''local'') I wonder is it almost a requirement
to get things to
>> work?
>
>
> No -- you can have a one-armed firewall but see below.
>
>> Because that would mean I should have two nics installed on each
machine
>> and get another hub along with my cable/dsl router.  If possible I
don''t
>> want to do that because it''s just a small home network of 3
machines, and
>> I thought that router would be good enough.  The router itself also
>> claims
>> to be a firewall, but I thought I should still run shorewall just in
>> case...
>>
>
> If you just want to protect the linux machine itself, you can still use
> Shorewall.
> -Tom

Using a one-armed firewall to protect multiple systems is largely security
by obscurity and wouldn''t add anything over what is provided by your
cable/dsl router.