Proteus wrote:
> I could really use some help setting up a basic firewall using iptables. Yes
> I have RTFM (man iptables) and have read several docs off the net and pages
> from my Linux Bible and Network Security Bible, but for some reason my
> brain is somewhat mush putting it all together. If some kind souls here
> could help me walk through a basic set of iptables commands for a basic
> firewall I would be very grateful; I am willing to learn at each step,
> propose the commands, just could use some help telling me where I go wrong,
> etc.
>
> I have home LAN with a home office PC (192.168.1.100) hooked up to a LinkSys
> WiFi Etherfast Router hooked up to cable modem. I have a secondary PC
> (192.169.1.101) also cabled to the router, hence basically a two computer
> LAN, not including any wifi connections to the router. Mandriva (Mandrake)
> Linux LE2005 on an AMD cpu system. For the sake of the exercise, let us say
> my router's IP is 300.10.10.100 (not a real IP address of course, for
> anonymity sake here).
>
> I want to allow basic internet activity: access web pages via HTTP and also
> HTTPS, access FTP downloads, SSH client connections to remote computers,
> run an SSHD daemon (port 22) sometimes off my main PC and also off my
> second PC, and open up specfic ports for gaming (Unreal Tournament Game
> needs ports 27900-28902 TCP and 7777-7787 UDP) connections to both the
> internet and among LAN computers (for a LAN hosted game).
>
> If I try proposing what I think are the iptables commands here, will someone
> help tell me where I am going wrong, perhaps tell me what to fix/change? I
> really want to understand iptables for configuring a firewall at the
> command line level. Or help me by discussing the commands as I propose them
> here?
>
> Any help appreciated.
Do I read you right? you want to run an iptables firewall on the PCs
rather than a linux router? If so, the LinWiz website can be used to
construct your iptables rule set for you from a simple-to-fill web form.
http://www.lowth.com/LinWiz
Chris