Close all ports except port 80, Secure HTML, and webmail

[renegadeviking]

I downloaded IPKungFu which is supposed to do this for me, except it did not according to a penetration site. Help me configure IPKungFu perfectly.


I did look at this site.

IPKungFu easy iptables based server firewall - zarzax the blog


Results
~~~~~~~~~~~~~~~~~~~~~
I downloaded IPKungFu which is supposed to do this for me, except it did not according to a penetration site. Help me configure IPKungFu perfectly.


I did look at this site.

IPKungFu easy iptables based server firewall - zarzax the blog


Results
~~~~~~~~~~~~~~~~~~~~~

rv @rv-laptop:~$ sudo ipkungfu
Checking integrity: .. PASSED
Checking MD5 Hash of config files: OK
Restoring /proc settings from cache: OK
Restoring iptables rules from cache: OK
rv@rv-laptop:~$ sudo nano -w /etc/default/ipkungfu
rv@rv-laptop:~$ ipkungfu -c
Since this is the first time ipkungfu is running on your system,
we will build its own md5sum signature: /usr/sbin/ipkungfu: line 236: /etc/ipkungfu/cache/ipkungfu.md5: Permission denied
OK

/usr/sbin/ipkungfu: line 249: /etc/ipkungfu/cache/not-the-first-run.rnd: Permission denied
/usr/sbin/ipkungfu: line 172: /etc/ipkungfu/cache/behaviour_files.md5: Permission denied
/etc/ipkungfu/ipkungfu.conf: line 1: ================================================== =======================: command not found
IPKungFu does NOT appear to be loaded.


Checking integrity: .. PASSED
/etc/ipkungfu/ipkungfu.conf: line 1: ================================================== =======================: command not found
Checking configuration...
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
TTL support detected!
MARK support detected!
Clearing old chains and tables...
Implementing custom rules...
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
Handling Services On The Following Ports...
-------------------------------
Port Protocol Name Target
-------------------------------
22 tcp ssh ACCEPT
25 tcp smtp ACCEPT
80 tcp http ACCEPT
110 tcp pop3 ACCEPT
443 tcp https ACCEPT
-------------------------------
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
Creating proc settings cache: OK
Creating iptables rules cache: OK

[daark.child]

Why not just use ufw to manage your firewall? Its quite simple and comes built into Ubuntu.

[ptkobe]

Dont know anything about IPKungFu, just wondering why didn't you use sudo on
$ ipkungfu -c