Secure system against attackers

[stathisx]

what do you think about this configuration?

iptables -A INPUT -i eth0 -i ACCEPT
iptables -A INPUT -i ppp0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i ppp0 -j LOG
iptables -A INPUT -i ppp0 -J DROP

i think that it's enough secure as all incoming connections are not permitted..
should i change something in that??

[sarumont]

That's a good, tight and simple config. for a desktop running no servers.

[stathisx]

that's the configuration i want to make....thanks for the post..i was not so sure!

[Goran]

I like to add this at top (to be on the safe side ) :

iptables -A INPUT -p tcp --dport 6000 -s ! localhost -j LOG
iptables -A INPUT -p tcp --dport 6000 -s ! localhost -j DROP

[DeafPulse]

where would I put that code to use that configuration?

[Goran]

You can put it in a script and save it as a file (eg. script):

#!/bin/sh
iptables -A INPUT -i eth0 -i ACCEPT
iptables -A INPUT -i ppp0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i ppp0 -j LOG
iptables -A INPUT -i ppp0 -J DROP

Then from the terminal:
chmod o+x script
./script

Then you can issue
iptables-save > rules
And whenever you want to activate the firewall type: iptables-restore < rules. You can also add the last line to /etc/rc.d/rc.local. You can also set up /etc/rc.firewall to apply the rules....

[stathisx]

open a terminal emulator and write them as commands..

[DeafPulse]

You can put it in a script and save it as a file (eg. script):

#!/bin/sh
iptables -A INPUT -i eth0 -i ACCEPT
iptables -A INPUT -i ppp0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i ppp0 -j LOG
iptables -A INPUT -i ppp0 -J DROP

Then from the terminal:
chmod o+x script
./script

Then you can issue
iptables-save > rules
And whenever you want to activate the firewall type: iptables-restore < rules. You can also add the last line to /etc/rc.d/rc.local. You can also set up /etc/rc.firewall to apply the rules....

THATS PERFECT!!! I've been looking for how to do this/use scripts. Is there a tutorial on building and using scripts I could get somewhere?

[Goran]

You could check at tldp or just google there are lot of tutorials out there. Aren't scripts great ? I recommend you getting a book as it is easier to read and is more comprehensive.