[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Sheflug] Re: iptables



Richard Ibbotson wrote:
Douglas


Can anyone recommend a good how-to or book on iptables?  I'm going
to try and build my own, so anything from beginner would be
brilliant.


I started from beginner and had to teach myself with this...

http://iptables-tutorial.frozentux.net/iptables-tutorial.html

There's a few sites out there on the net but this is the best one. I found that it wasn't good enough for me so I got on a jet to New York and took the Acela Express to Boston to interview Bob Ziegler who then signed a copy of his book for me. When I came home this was published in Linux Magazine. Anyone wants to read a PDF version of this I can mail it to them. The best book I've seen about iptables is "Linux Firewalls - Includes full coverage of iptables" by Robert L. Ziegler. ISBN 0-7357-1099-6. Published by New Riders.
I managed to pick up a copy of this book dead cheap at the cheap book shop on the Moor. but the isbn number I have is 0-7357-0900-9 which refers to the first edition. The principles are the same though so it's been a very useful purchase but I also had the advantage of the SuSE default firewall using iptables. I often refer to the man pages for iptables, and don't forget iptables-save and iptables-restore.

You need to allow localhost traffic otherwise things can go a bit twiddly. Once you know what you want to allow/disallow/log etc it's not hard imo.


If you don't quite crack iptables - and some people don't - I'd suggest IP Cop or m0n0wall...

http://www.ipcop.org/
http://www.m0n0.ch/wall/

best with Soekris hardware but you can use other things...

https://kd85.com/soekris.html


___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

 GNU the choice of a complete generation.