Secure system against attackers

what do you think about this configuration?

Code:

---

iptables -A INPUT -i eth0 -i ACCEPT
iptables -A INPUT -i ppp0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i ppp0 -j LOG
iptables -A INPUT -i ppp0 -J DROP

---

i think that it's enough secure as all incoming connections are not permitted..
should i change something in that??

That's a good, tight and simple config. for a desktop running no servers. 8)

that's the configuration i want to make....thanks for the post..i was not so sure!

I like to add this at top (to be on the safe side ) :

iptables -A INPUT -p tcp --dport 6000 -s ! localhost -j LOG
iptables -A INPUT -p tcp --dport 6000 -s ! localhost -j DROP

:)

where would I put that code to use that configuration?

You can put it in a script and save it as a file (eg. script):

Code:

---

#!/bin/sh
iptables -A INPUT -i eth0 -i ACCEPT
iptables -A INPUT -i ppp0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i ppp0 -j LOG
iptables -A INPUT -i ppp0 -J DROP

---

Then from the terminal:
chmod o+x script
./script

Then you can issue
iptables-save > rules
And whenever you want to activate the firewall type: iptables-restore < rules. You can also add the last line to /etc/rc.d/rc.local. You can also set up /etc/rc.firewall to apply the rules....

open a terminal emulator and write them as commands..

Quote:

---

Originally Posted by Goran

You can put it in a script and save it as a file (eg. script):

Code:

---

#!/bin/sh
iptables -A INPUT -i eth0 -i ACCEPT
iptables -A INPUT -i ppp0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i ppp0 -j LOG
iptables -A INPUT -i ppp0 -J DROP

---

Then from the terminal:
chmod o+x script
./script

Then you can issue
iptables-save > rules
And whenever you want to activate the firewall type: iptables-restore < rules. You can also add the last line to /etc/rc.d/rc.local. You can also set up /etc/rc.firewall to apply the rules....

---

THATS PERFECT!!! I've been looking for how to do this/use scripts. Is there a tutorial on building and using scripts I could get somewhere?

You could check at tldp or just google there are lot of tutorials out there. Aren't scripts great :) ? I recommend you getting a book as it is easier to read and is more comprehensive.