Ipchains how to, please help

[lad24mx]

Is there a book, something that will help me get up to speed with firewalling in Linux?
I'm mainly interested on learning how to properly set up ipchains.
If you know of a good book that may help me further my understanding in this subject, please let me know.

About the NHF on IPchains, I didn't find it very helpful, if limited at must.

Thanks all.

[Fandelem]

i don't know how detailed you want - but some folks have found http://www.fandelem.com/nhf.html useful (the PMFirewall sect.) - read that whole section if you get a chance..

regards,

~kyle

[lad24mx]

Originally posted by Fandelem:
i don't know how detailed you want - but some folks have found http://www.fandelem.com/nhf.html useful (the PMFirewall sect.) - read that whole section if you get a chance..

regards,

~kyle


Basically, all I need is to learn the proper commands, 'cause I want to know what goes on without needing to resort to PMfirewall and/or Guarddog.

But you can be sure I'll check out the site you mention above.

Thanks.

[Fandelem]

But that's the wonderful thing about PMFirewall - it isn't an actual program that runs - it's based solely on IPCHAINS commands from config files that you can edit and add and change rules - I personally went to all these other sites where they "create" a firewall for you - and in about half the time I learned IPCHAINS completely using PMFirewall and poking around.. but whatever works for you - just poke around and try things, it's the best way to learn ;b

remember, tail -f /var/log/messages is your friend while working with IPCHAINS.. I remember one time I was trying to figure out how to work with ICMP packets and I effectively blocked type 3 and my /var/log/messages ended up being about 90 megs before bad, bad things started happening ;b (actually, the only way I noticed it was because my family was complaining about how slow the network was, so I decided to check the logs, hehe.. go figure.. now I check them every chance I can http://www.linuxnewbie.org/ubb/smile.gif)

if you want to learn the commands, go to http://linuxdoc.org and go to the howto section and go to the ipchains howto - I read most of that before trying anything.. no need to buy a book imo - perhaps Maximum Security Linux which I still think is one of the best books around..

oh well I've rambled enough :}

regards,

~kyle

[ndelo]

New Riders publishes a good book aptly called "Linux Firewalls." Its purple and white and has the photo of a fireboat on the cover. I think its about $45 off the shelf, but can probably be found for a lot less than that from www.bookpool.com. (http://www.bookpool.com.) It's is basically a long explination of ipchains and all the associated protocols. It has sample scripts for building a firewall on your home machine (one nic) as well as LAN/DMZ setups. Check it out.

[ndelo]

here's the exact url:
http://www.bookpool.com/.x/nrr6aoejs8/sm/0735709009

[lad24mx]

Thank you all for your prompt replies.
You have all been very helpful.

I'm studying towards being Cisco certified and I really need to get an understanding of firewalls.

Thank you all.

[gjansky]

The Linux Firewalls book is written by Robert Ziegler. I believe there is a companion web site: http://linux-firewall-tools.com

I created a firewall using the web site, but am now using the book to fine tune and tweak the firewall. I like the book, a good reference point. I wish I had known about PMFirewall.