PCLinuxOS-Forums
News: ...FLASH!!! ...New PCLinuxOS Testing board now open. Register today! Be an active contributor to the PCLinuxOS future! ... Read all about it now, on THIS forum!!!..
 
*
Welcome, Guest. Please login or register. May 27, 2012, 04:11:55 PM


Login with username, password and session length


Pages: 1 [2]   Go Down
  Print  
Author Topic: Firewall  (Read 1085 times)
CopperStuff
New Friend
*
Offline Offline

Posts: 7


« Reply #15 on: August 07, 2011, 08:43:11 PM »

OK. After breaking everything and reinstalling a coupla times I did what Andy suggested. Fixed that port then another shows up. I guess screw it. Chasing ports is not my idea of running an os.  From all my reading it does seem that by default Linux is more secure than, well, that other os, so I'll just content myself with this latest release of PCLinuxOS and see what I can learn to maybe get away from that other os.

Thanx for the replies.
Logged
YouCanToo
PCLinuxOS Tester
Hero Member
*******
Offline Offline

Posts: 4251


Location: Lebanon, OR., USA


WWW
« Reply #16 on: August 08, 2011, 12:32:10 AM »

You can stealth it by adding

DROP net fw tcp 93

to the bottom of /etc/shorewall/rules, just above "#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE"

Then either
Reboot or start the PCC, click on System -> Enable or disable system services; find the Shorewall service, click Stop and when it stops click Start.


No need for rebooting, just restart the service itself.

Open a console window as the root user and use the following command

service iptables restart.

That rebooting stuff is oh so Windows like .........
Logged





Be sure to visit the NEW Knowledge Base


Linux is user-friendly- it's just picky who its friends are!
YouCanToo
PCLinuxOS Tester
Hero Member
*******
Offline Offline

Posts: 4251


Location: Lebanon, OR., USA


WWW
« Reply #17 on: August 08, 2011, 12:38:15 AM »

OK. After breaking everything and reinstalling a coupla times I did what Andy suggested. Fixed that port then another shows up. I guess screw it. Chasing ports is not my idea of running an os.  From all my reading it does seem that by default Linux is more secure than, well, that other os, so I'll just content myself with this latest release of PCLinuxOS and see what I can learn to maybe get away from that other os.

Thanx for the replies.

FWIW if the port is closed you are protected. Stealth just means that any request  to that port is being dropped and no reply is being returned. It is like hiding, where when a port is closed the other side knows there is a computer there but that post is closed.  Just be careful which ports that you close.
Logged





Be sure to visit the NEW Knowledge Base


Linux is user-friendly- it's just picky who its friends are!
7272andy
PCLinuxOS Tester
Hero Member
*******
Offline Offline

Posts: 1377


Bath - UK


« Reply #18 on: August 08, 2011, 06:10:05 AM »

You can stealth it by adding

DROP net fw tcp 93

to the bottom of /etc/shorewall/rules, just above "#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE"

Then either
Reboot or start the PCC, click on System -> Enable or disable system services; find the Shorewall service, click Stop and when it stops click Start.


No need for rebooting, just restart the service itself.

Open a console window as the root user and use the following command

service iptables restart.

That rebooting stuff is oh so Windows like .........


Picky picky YCT Grin

I did say Reboot OR Restart the service

FWIW if the port is closed you are protected. Stealth just means that any request  to that port is being dropped and no reply is being returned. It is like hiding, where when a port is closed the other side knows there is a computer there but that post is closed.  Just be careful which ports that you close.

Good advice
Logged



Bare Metal 1         Bare Metal 2
Intel Celeron 420M   Intel i5 540M
2GB Ram              4GB Ram
Intel 943GM          Radeon HD 5650 PCI Express
RT2573               RT2790
32bit KDE            32&64bit KDE
Pages: 1 [2]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM