<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.12.2">
</HEAD>
<BODY>
<BR>
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">> But now I have a Debian server running (providing HTTP, SSH and FTP to</FONT>
<FONT COLOR="#000000">> the world.. not user name and password is needed for SSH and FTP) I'm</FONT>
<FONT COLOR="#000000">> assuming that I need some kind of software firewall on this box for</FONT>
<FONT COLOR="#000000">> safety and (also just for education) What would people recommend? I</FONT>
<FONT COLOR="#000000">> looked into firestarter but that requires GUI which I don't have/want</FONT>
<FONT COLOR="#000000">> on this box.</FONT>
<FONT COLOR="#000000">> Any ideas/recommendations?</FONT>
<FONT COLOR="#000000">IPTables == excellent!</FONT>
<FONT COLOR="#000000">Seriously, have a look at IP Tables. I'd set them up from the </FONT>
<FONT COLOR="#000000">physical console of the machine, that way when you start your ruleset </FONT>
<FONT COLOR="#000000">with</FONT>
</PRE>
</BLOCKQUOTE>
<PRE>
</PRE>
NEVER, EVER, EVER type iptable rules in to a command line, you write a script and run it, test it, then adapt it. This is essentially what firestarter does.<BR>
<BR>
It is a good gui but doesn't cover some of the more advanced options in iptables. <BR>
<BR>
I would recommend you setup X11 ssh forwarding to another unix box, and run the firestarter GUI.<BR>
<BR>
K,
</BODY>
</HTML>