RE: [cobalt-security] [RaQ3i] Firewall Software

[Theodore Jones <theoj@xxxxxxxxxxxxx>]

> +>And the self-found answer for Raq3 is to use
> +ipchains-1.3.9-5.i386.rpm found
> +>at http://www.rpmfind.net.
> +
> +You just install this and it works...?
> +
> +~ T
>
>
> Not exactly.
> Ipchains will be active but then it needs to be configured.
> By far the easiest firewall utility that 'front-ends' for
> Ipchains is Pmfirewall.
> http://www.pmfirewall.com/PMFirewall/
>
> You'll need to be careful when you run through the PM install
> and have a rudimentary knowledge of which ports and IP's you
> want to deny or allow.
>
> As many have mentioned before in other posts a good base start at
> securing your server is:
>
> Portsentry
> LogCheck
> PMFirewall
> Ipchains
> TripWire
> SSH: Updated
> Bind: Updated
> ProFTPd: Updated

Excellent.  Thanks for the summary of the latest suggested upgrades also..

~ T