豆豆网 > 技术应用 > 操作系统 > ubuntu linux > 正文

Ubuntu-Server 6.10 防火墙系统安装

豆豆网技术应用频道 2007年03月04日【字号：小中大】收藏本文

关键字：智能拼音 WPA Apache配置 Ubuntu桌面 Ubuntu 8.04 TELNET

本文详细介绍Ubuntu-Server 6.10 防火墙系统安装

　　If you are confused here, first configure and start your DHCP server as shown in this article (page 9), and let your workstation detect the proper settings automatically.

　　Now do:

　　apt-get install libnet-ssleay-perl libauthen-pam-perl libio-pty-perl shorewall dnsmasq

　　wget http://surfnet.dl.sourceforge.net/sourceforge/webadmin/webmin_1.300_all.deb

　　"surfnet" is the dutch server. Change that to "heanet"(for Ireland), "belnet"(for Belgium), "mesh" (for Germany) and so on.

　　dpkg -i webmin_1.300_all.deb

　　cp /usr/share/doc/shorewall/examples/two-interfaces/* /etc/shorewall/

　　cd /etc/shorewall

　　gunzip interfaces.gz masq.gz rules.gz policy.gz

　　Now open your browser and login to webmin at https://192.168.1.1:10000 as root with your root password and, using webmin's shorewall module, change the policy's and rules of your firewall as needed (for now, I only set the policy file to the example as shown, you may copy and paste my policy file for starters, if you don't like webmin).

　　Also set in /etc/shorewall.conf　the line "IP_FORWARDING=Keep"　to　"IP_FORWARDING=On" (without quotes) and enable the firewall in /etc/default/shorewall.

　　My /etc/shorewall/policy　now looks like this:

###############################################################################
#SOURCE　　　　DEST　　　　POLICY　　　　LOG LEVEL　　LIMIT:BURST
#
# Note about policies and logging:
#　　This file contains an explicit policy for every combination of
#　　zones defined in this sample.　This is solely for the purpose of
#　　providing more specific messages in the logs.　This is not
#　　necessary for correct operation of the firewall, but greatly
#　　assists in diagnosing problems.
#
#
# Policies for traffic originating from the local LAN (loc)
#
# If you want to force clients to access the Internet via a proxy server
# on your firewall, change the loc to net policy to REJECT info.
loc　　　　net　　　　ACCEPT
loc　　$FW　　ACCEPT
loc　　　　all　　　　REJECT　　　　info
#
# Policies for traffic originating from the firewall ($FW)
#
# If you want open access to the Internet from your firewall, change the
# $FW to net policy to ACCEPT and remove the 'info' LOG LEVEL.
# This may be useful if you run a proxy server on the firewall.
$FW　　net　　ACCEPT
$FW　　loc　　ACCEPT
$FW　　　　all　　　　REJECT　　　　info
#
# Policies for traffic originating from the Internet zone (net)
#
net　　　　$FW　　　　DROP　　　　info
net　　　　loc　　　　DROP　　　　info
net　　　　all　　　　DROP　　　　info
# THE FOLLOWING POLICY MUST BE LAST
all　　　　all　　　　REJECT　　　　info
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE

　　Next do:

上一页 1 2 345 6 7 8 9 下一页

来源：howtoforge 责编：豆豆技术应用

正在加载评论...