[cobalt-security] setting up security on a cube 3

["Mark Huth" <mhuth@xxxxxxxxxxxx>]

I'm a raw novice in the unix world and have purchased a cube 3 to act as a
small server for my home network.  I've spent several hours plowing through
the archives and fiddling I find myself quite confused.

First, can I secure my small network using a cube 3 with the standard
firewall software?  I plan to run the windows file sharing service and use
the box to act as a mail server.  I'd like to run the cube as my only
connection to the internet.

Second, assuming I can secure it could someone give me (or point me to) a
brief guide to configuring the cube.  I find the manual unclear.  For
example, I presume that the output rules apply to the machines and users on
"my" side of the cube.  Thus I should allow my users (my wife, me, and my
sons)  to have all access...my default policy should be accept.

Then for input rules, I've got:
Order		Source Criteria				Destination Criteria
1		IP=192.168.1.0-192.168.1.255;	IP=127.0.0.1-127.0.0.1; Port=80;
Protocol=tcp; Port=80; Protocol=tcp; " name=""
accept
2		IP=192.168.1.0-192.168.1.255;	IP=192.168.1.1-192.168.1.1; Port=80;
Protocol=tcp; Port=80; Protocol=tcp; " name=""		accept
etc

I've set forewarding to default deny!

When I do a port scan, however, I find that I can see several ports from the
outside.
Again, I'm told that 139 is open, 23 (telnet),  25 (smtp), 113 (ident), 143
(imap).  Help?
thanks in advance.







Mark Huth
mhuth@xxxxxxxxxxxx
I'd really like to get into space, but how is that going to happen?