The Linux and Open Source Community Website

  • vibrant gnu/linux user group
  • linux blog
  • events pictures
  • contact us
  • feedback
Home › Forums › VGLUG - Vibrant GNU/Linux User Group

need suggestion on FIREWALL

Pinakin Bhatt — Wed, 02/22/2012 - 11:39

Hi.All,

i need your best suggestion , i have one gateway server ( RHEL 5) and  have configured transparent proxy.

Now my requirement are as under

1)  i want to block all the traffic from WAN side to LAN. ( not any single port should open)


2) only HTTP , HTTPS and FTP port should be open from LAN to WAN.

3) Nobody is try to attack on my gateway server,or attack on any hidden port.


Let me know your valuable suggestion.

--
Please read http://www.catb.org/~esr/faqs/smart-questions.html before posting.
You received this message because you are subscribed to the "Vibrant GNU/Linux User Group".
To stop receiving emails from this group, mail to VGLUG+unsubscribe@googlegroups.com
To post to this group, send email to VGLUG@googlegroups.com
For more options, visit this group at http://groups.google.com/group/VGLUG

‹ Installing Fedora along with Win 7 as dual boot Ten Things I wish I knew when becoming a Linux Admin ›
  • VGLUG - Vibrant GNU/Linux User Group
  • Login to post comments

need suggestion on FIREWALL

pngmor — Mon, 02/27/2012 - 14:30

if u have cisco router u can do that

if u don't have cisco router/firewall u can still do with iptables/proxy server.

just allow only your required service/ports in proxy server & iptables

by default wan to lan is restricted

ok bye.

On 2/22/12, Pinakin Bhatt
wrote:
> Hi.All,
>
> i need your best suggestion , i have one gateway server ( RHEL 5) and have
> configured transparent proxy.
>
> Now my requirement are as under
>
> 1) i want to block all the traffic from WAN side to LAN. ( not any single
> port should open)
>
> 2) only HTTP , HTTPS and FTP port should be open from LAN to WAN.
>
> 3) Nobody is try to attack on my gateway server,or attack on any hidden
> port.
>
>
> Let me know your valuable suggestion.
>
> --
> Please read http://www.catb.org/~esr/faqs/smart-questions.html before
> posting.
> You received this message because you are subscribed to the "Vibrant
> GNU/Linux User Group".
> To stop receiving emails from this group, mail to
> VGLUG+unsubscribe@googlegroups.com
> To post to this group, send email to VGLUG@googlegroups.com
> For more options, visit this group at http://groups.google.com/group/VGLUG
>

--
Please read http://www.catb.org/~esr/faqs/smart-questions.html before posting.
You received this message because you are subscribed to the "Vibrant GNU/Linux User Group".
To stop receiving emails from this group, mail to VGLUG+unsubscribe@googlegroups.com
To post to this group, send email to VGLUG@googlegroups.com
For more options, visit this group at http://groups.google.com/group/VGLUG

  • Login to post comments

need suggestion on FIREWALL

ElectroMech — Wed, 02/22/2012 - 21:30

Hi,

i need your best suggestion , i have one gateway server ( RHEL 5) and  have configured transparent proxy.


Now my requirement are as under

1)  i want to block all the traffic from WAN side to LAN. ( not any single port should open)


2) only HTTP , HTTPS and FTP port should be open from LAN to WAN.

3) Nobody is try to attack on my gateway server,or attack on any hidden port.

Mostly you can rely on iptables firewall.


You need to stick to some basic rules.

If you do not want to scan your ip then need to block nmap request.

Of if you want some ready made solution try pfsense.
 

Thanks and Regards.

--

--
Nilesh Vaghela
(RHCSA RHCE)
ElectroMech Corporation
Redhat Channel Partner and Training Partner
404, Maulik arcade, Above Karnavati Pagarakha Bazar,
Nr. Mansi cross Road,
Satellite Rd, Ahmedabad

25, The Emperor, Fatehgunj, Baroda.
www.electromech.info

--
Please read http://www.catb.org/~esr/faqs/smart-questions.html before posting.
You received this message because you are subscribed to the "Vibrant GNU/Linux User Group".
To stop receiving emails from this group, mail to VGLUG+unsubscribe@googlegroups.com
To post to this group, send email to VGLUG@googlegroups.com
For more options, visit this group at http://groups.google.com/group/VGLUG

  • Login to post comments

Search

Supporters

  • Ask4 IT Solutions
  • Electromech Corporation
  • VGLUG Website

New forum topics

  • Keep your disk clean with BleachBit
  • Nagios Documention
  • vacancy for network admin
  • Read-only file system
  • The Ultimate Bash Array Tutorial with 15 Examples
more

Active forum topics

  • Read-only file system
  • Hard Drive backup & restore
  • Nagios Documention
  • Keep your disk clean with BleachBit
  • vacancy for network admin
more

  • vibrant gnu/linux user group
  • linux blog
  • events pictures
  • contact us
  • feedback


Sitemap | Ask4 IT Solutions | Planet VGLUG