[KLUG Members] IPChains problem

Bruce Smith members@kalamazoolinux.org
07 Jun 2002 10:35:32 -0400


> What I want to do....
>   I want to stop anything BUT http (80) ssh (22), DNS (53) ftp
> (20/21), and ICMP messages (the consequences of blocking those
> are fairly clear and nasty) for getting IN or OUT of this box.

Short answer without reading your rules:  For something that simple use
the firewall setup that Redhat lets you configure when you install the
system.  Tell it "medium firewall" and select those ports to be open.

If you've already installed, you can run "lokkit" to [re]configure the
Redhat firewall rules.  (RPM installation from CD#1 may be necessary)

--------------------------------------------
Bruce Smith                bruce@armintl.com
System Administrator / Network Administrator
Armstrong International, Inc.
Three Rivers, Michigan  49093  USA
http://www.armstrong-intl.com/
--------------------------------------------