How To Install A Custom Iptables Firewall

[mebusybody]

Originally Posted by falko

/sbin/bastille-netfilter is using iptables.
You can check the state of your firewall with

iptables -L

Hi Falko
thanks, any ideal the advantage of using the script ?

[till]

The advantage of the bastille script is, that it works with IPTables and IPChains andcan be easiely configured with a config file.

[miha1978]

i am running centos 4.3 and ispconfig, i am interested how to put default bastille sript (/sbin/bastille-netfilter) into booting process

THX

[till]

Bastille is started automatically during the boot process if you enable it in ISPConfig under management > server > services

[danf.1979]

If I install Bastille before I even thinking about installing ispconfig, then, when installing ispconfig is my bastille config file going to be erased?
Does ispconfig check if there is an existing bastille installed?

[falko]

Yes, ISPConfig checks that.

[renata]

Hi!

I'm Renata from Brazil, and first anything else I'm very confused. I'm a 'new girl" in this "firewall lands" ;-) Please, let me know if my understanding of your tutorial is correct:

.- The primary_firewall file is the firewall rules that protect the server.
.- The firewall.iptables file is monitoring the rules (this is not the firewall rules)

So, what about this another files (firewall.conf.iptables, firewall.dns, firewall.banned, firewall.iana-reserved, and firewall.local.iptables) to be located in /etc/firewall ?? They are really necessary for your tutorial work?

.- The part where I'm lost is about to understand what is the function of the firewall.conf.iptables file. This file is not contradictory or conflict with your primary_firewall file? Which is the difference between them?

I'm running a webserver Debian Lenny (LAMP)

I'll appreciate a lot your answer!

Thanks!

Renata

Originally Posted by sbovisjb1

Yes you need that file, but most people do... if you don't this is what to do.
Put firewall.conf.iptables, firewall.dns, firewall.banned, firewall.iana-reserved, and firewall.local.iptables (remove the "-generic" from the file names) in a directory called /etc/firewall. <-- that is if my other way didnt work, its just a case of kernel directories and dependincies.