Author Topic: setting the firewall  (Read 727 times)

Offline gezza

  • Hero Member
  • *****
  • Posts: 513
setting the firewall
« on: March 08, 2012, 02:22:20 PM »
Hi to all,
If I set the firewall to disable internet access to my machines, it also disables access from all machines on the network.
The intranet should be working if firewall is enabled, but not internet?
Could anyone explain what is happening here?
The OS is 2012.2
Gezza

Offline yodelu

  • PCLinuxOS Tester
  • Sr. Member
  • *******
  • Posts: 317
Re: setting the firewall
« Reply #1 on: March 10, 2012, 04:56:06 PM »
we need more info.. please post here
cat /etc/shorewall/interfaces
cat /etc/shorewall/rules.drakx

Offline muungwana

  • Hero Member
  • *****
  • Posts: 6235
Re: setting the firewall
« Reply #2 on: March 10, 2012, 06:04:50 PM »

The firewall works by first blocking all incoming traffic regardless of where they are from and then selectively opening ports to all traffic on those selected ports regardless of where the traffic is from.

If you want to do something the firewall UI doesnt allow like all traffic from your local network but not from the internet, then you will have to write your own IP table rules.

whats the output of the following command?

ifconfig
.. 3 things are certain in life : death, taxes and software bloat ..
.. tell me something i don't know, something i can use as i struggle to reason with the world around me ..

Offline gezza

  • Hero Member
  • *****
  • Posts: 513
Re: setting the firewall
« Reply #3 on: March 11, 2012, 04:04:47 PM »
Hello, muungwana and  yodelu
Thanks for coming back.
I think that the subject of firewalling is getting to much for a 76 year old.
I will just leave the default firewall setting for now.
Again many thanks for your input.
Gezza

Offline yodelu

  • PCLinuxOS Tester
  • Sr. Member
  • *******
  • Posts: 317
Re: setting the firewall
« Reply #4 on: March 12, 2012, 01:42:07 AM »
firewalling is getting to much for a 76 year old..

i don't think so  :)
my opinion : if you don't have installed and running some server stuff  (squid, dhcp/dns server etc) on your machine then the default settings provided by drakfirewall are good enough.
To be more exact i can tell you that i don't have a firewall at all at my home (all traffic/ports are permitted) and.. everything is fine
Of course by choosing to use a firewall is a good security practice over the internet..
good luck !