Most people, when creating a Linux firewall, concentrate soley on manipulating kernel network filters: the rulesets you create using userspace tools such as iptables (2.4 kernels,) ipchains (2.2 kernels,) or even ipfwadm (2.0 kernels). However there are kernel variables -- . . . . Most people, when creating a Linux firewall, concentrate soley on manipulating kernel network filters: the rulesets you create using userspace tools such as iptables (2.4 kernels,) ipchains (2.2 kernels,) or even ipfwadm (2.0 kernels). However there are kernel variables -- independent of any kernel filtering rules -- that affect how the kernel handles network packets. This article will discuss these variables and the effect they have on the network security of your Linux host or firewall. There are many settings inside the Linux kernel that can vary from machine to machine. Traditionally, these were set at compile time, or sometimes were modifiable through oft-esoteric system calls. For example each machine has a host name which would be set at boot time using the sethostname(2) system call, while iptables reads and modifies your Netfilter rules using getsockopt(2) and setsockopt(2), respectively. The link for this article located at SecurityFocus is no longer available. . Enhance the Linux firewall's security and performance by adjusting key kernel network settings like IP forwarding and connection tracking configurations. Firewall Security, Kernel Configuration, Network Security, Linux Performance. . Anthony Pell
Mike Murray describes how he patched the 2.2 Linux kernel to run an ipchains packet filtering firewall when the machine is halted. "As systems administrators, it's often funny how new and interesting information ends up in our hands. Sometimes, it's through an intentional course of study; other times, it seems to arrive by accident. That's exactly how the concept of using a halted Linux computer as a firewall occurred to me. . . .. Mike Murray describes how he patched the 2.2 Linux kernel to run an ipchains packet filtering firewall when the machine is halted. "As systems administrators, it's often funny how new and interesting information ends up in our hands. Sometimes, it's through an intentional course of study; other times, it seems to arrive by accident. That's exactly how the concept of using a halted Linux computer as a firewall occurred to me. I was at work, perusing an internal corporate mailing list and saw a message about something that was once present in Linux. The message referred to a method for shutting down a Linux box while ipchains is still running, and having the box continue to perform firewall tasks. My first response was to stifle a laugh - a firewall that works while in a halted state? I contacted the author (with a bit too much sarcasm in my letter), and was sent a link to an old discussion thread on the Firewalls list about a rumored feature in the 2.0.x kernels. This feature allowed you to run shutdown -h (halt) on the machine, and the firewall would remain active but with no drives mounted and no processes running. That is, the firewall would be in run level 0, but still be filtering packets. However, the list mentioned that this no longer worked in the 2.2.x series kernels. I knew that I couldn't leave it alone, however. I set out to make a 2.2.x box perform a similar function, and I hoped that I would be able to do it without having to patch the kernel in any way. It turns out that I can. The link for this article located at SysAdmin is no longer available. . Discover how Mike Murray modified the 2.2 kernel to enable an ipchains firewall to operate seamlessly, even in a halted system state.. Linux Firewall Management, Packet Filtering Techniques, Kernel Patch Strategies. . Anthony Pell
Here's a pretty good guide on the most common things you can do to block many of the most commonly exploitable services from entering/leaving your network. "The following 11 sections for this assignment will be demonstrated using a Redhat Linux 6.1 . . . . Here's a pretty good guide on the most common things you can do to block many of the most commonly exploitable services from entering/leaving your network. "The following 11 sections for this assignment will be demonstrated using a Red Hat Linux 6.1 operating system using IPChains as the packet-filtering device. I have made the assumption that eth0 is the external interface. For each section I will begin with a brief explanation why the particular services should be blocked followed by how the services work and how I can block these services using the IPChains rules. I will also try to include some helpful hints I have picked up along the way." The link for this article located at SANS is no longer available. . Explore reliable techniques to disable frequently vulnerable services on Red Hat Linux environments by employing ipchains.. ipchains rules, network defense, packet-filtering strategies. . Anthony Pell
Ipchains is a packet-filtering firewall package. You can findan RPM of Ipchains in RedHat/RPMS in the latest PC Quest RedHat CD. First youhave to check whether the Linux kernel supports Ipchains. For this, look for afile named ip_fwchains in /proc/net. If . . . . Ipchains is a packet-filtering firewall package. You can findan RPM of Ipchains in Red Hat/RPMS in the latest PC Quest Red Hat CD. First youhave to check whether the Linux kernel supports Ipchains. For this, look for afile named ip_fwchains in /proc/net. If its not there, then you will have torecompile your kernel. The KERNEL-HOWTO and IP CHAINS-HOWTO will help you. Ifthe file exists, then you can check whether Ipchains is already installed. The link for this article located at PCQuest is no longer available. . Ipchains enhances Linux network security by controlling traffic with defined rules, serving as an intermediary before Iptables and netfilter were adopted. Ipchains Implementation, Packet Filtering Linux, Red Hat Firewall Setup, Security Tool, Linux Security Solutions. . Anthony Pell
In this three-part series, Pawel Leszek looks at firewall products for Linux. Part 1 is all about open source solutions. Part 2 will cover commercial products, while Part 3 will take a look at firewall appliances. The standard firewalling support in . . . . In this three-part series, Pawel Leszek looks at firewall products for Linux. Part 1 is all about open source solutions. Part 2 will cover commercial products, while Part 3 will take a look at firewall appliances. The standard firewalling support in the Linux kernel is built upon two components -- ipchains and IP Masquerading. Both features are included in standard kernel distributions. Ipchains is a mechanism for filtering IP packets; its inclusion means that any flavor of Linux can be configured to run as a filtering gateway/firewall almost right out of the box. The second important firewalling component in the kernel is IP Masquerading -- a network address translation (NAT) implementation feature with which you can hide real IP addresses used in an internal network so you can use nonrouting IP addresses in your LAN. If you want to set up IP Masquerading, you will need to use the ipchains command-line tool. The link for this article located at LinuxWorld is no longer available. . Dive into the world of Linux-based open source firewall solutions. In this introductory segment of our comprehensive series, we will examine various tools and their key functionalities.. Linux Firewall, Open Source Solutions, Network Security, Firewall Products. . Anthony Pell
The IPchains Firewalling Module, part of the RockSolid Linux Distribution, allows you to easily maintain a firewall based on ipchains with the Webmin look and feel. It has three modes: Newbie (select one of five security levels), Template (define from a . . . . The IPchains Firewalling Module, part of the RockSolid Linux Distribution, allows you to easily maintain a firewall based on ipchains with the Webmin look and feel. It has three modes: Newbie (select one of five security levels), Template (define from a table with protocols and directions what should be allowed to pass your firewall), and Expert (have the real ipchains experience by having every parameter under control by editing a script file which has all ipchains rules). Nearly all of the ipchains options are supported. The link for this article located at Freshmeat.net is no longer available. . Effortlessly control firewalls via the IPTables Feature in RockSolid Linux utilizing Webmin. Tailor settings with various configurations and options.. IPchains Module, Webmin Configuration, RockSolid Linux, Firewall Management, Network Security. . LinuxSecurity.com Team
The article examines the basic concepts pertaining to routing, network address translation (NAT), firewalls, and a program called ipchains. Individual sections address each concept. The last section combines the basics into a sample configuration for linking a local network to . . . . The article examines the basic concepts pertaining to routing, network address translation (NAT), firewalls, and a program called ipchains. Individual sections address each concept. The last section combines the basics into a sample configuration for linking a local network to the Internet. The link for this article located at LinuxPlanet is no longer available. . Understanding core principles of routing, NAT, firewalls, and iptables in Linux network setups.. Routing Concepts,NAT Implementation,Ipchains Setup,Linux Firewalls. . Anthony Pell
This Linux Journal article describes the process of configuring a PC to become a firewall. It includes information on using the Linux Router Project, ipchains, and securing your PC to be used with a cable modem or DSL . . .. This Linux Journal article describes the process of configuring a PC to become a firewall. It includes information on using the Linux Router Project, ipchains, and securing your PC to be used with a cable modem or DSL connection. The link for this article located at Linux Journal is no longer available. . Discover how to set up your computer as a security barrier utilizing the Linux Router Project together with iptables to bolster protection.. Linux Firewall Configuration, ipchains Guide, Network Security Setup. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.