[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Ipchains and dns - my firewall.



Hello all,

I have been working (slowly) on a ipchain packet filter firewall for cobalts. I started a sourceforge project and I do have a very raw initial release.

URL:
http://sourceforge.net/projects/securecobalt/

You can download my alpha release.

I am also looking for anyone else who would want to help develop the scripts. I have cvs set up on sourceforge.

My eventual goal is to make it into a cobalt package with an interface in the control panel.

Thanks,
Lance

Robbert Hamburg (HaVa Web- & Procesdesign) wrote:

# DNS Server (persistant connections)
/sbin/ipchains -A input -s 0/0 -d 0/0 53 -p tcp -y -j ACCEPT

# allow dns - standard
/sbin/ipchains -A input -p udp -s 0/0 -d 0/0 53 -j ACCEPT

Running the above in a firewall script makes it impossible to use that dns
server.....

what do i need to do to make it for everyone possible to use the dns(for
users), but also allow zone transfers.

Someone willing to share an example. Cause I'm out in the blue here....

Robbert