Changes

Jump to: navigation, search

Using Firestarter to Configure an Ubuntu Linux Firewall

1,395 bytes added, 18:38, 26 June 2007
The Firestarter Rules Screen
Right clicking on a blocked event in the list displays menu containing a number of options. From this menu it is possible to allow connections from this external IP address (for example if you find the access attempt was valid), enable connections of this type from any source and also disable the port used for this type of connection. It is also possible to look up host names so that system names, rather than IP addresses are displayed.
=== The Firestarter Rules Policy Screen === The Policy screen lists any policy rules which have been set up on the firewall. By default the screen appears as follows (with no rules defined). In the next section of this chapter we will look at defining firewall security policy. [[Image:Example.jpg]] == Defining Firewall Policies == Probably the most important task in configuring a firewall is defining policy. This essentially involves specifying what traffic will be permitted by the firewall. Policy is defined in the ''Policy'' screen of the Firestarter user interface (as shown above). Firstarter allows Policy to be defined for both inbound and outbound traffic via the ''Editing''. Select either ''Outbound policy'' or ''Inbound policy'' depending on the rules you wish to edit. We will begin by looking at inbound traffic policy. With ''Inbound policy'' selected we can specify the hosts from which we will allow inbound connections. To do so, click in the ''Allow connections from host'' area of the screen area of the screen so that the ''Add Rule'' toolbar button activates. Click on the ''Add Rule'' button to invoke the ''Add new inbound rule'' dialog as shown below: [[Image:Example.jpg]] Enter the host name or IP address of the host for which you wish to enable connections and an optional comment and click the ''Add'' button to add the rule. The IP address or host name will now be listed in the Policy screen.

Navigation menu