[Gllug] Basic Firewall Policy

[Wayne Clancy]

"A simple 1 ip-address setup and a free USB ADSL modem is not ideal for 
this to be secure."

What's wrong with NAT and port forwarding  required service's.

You could always take a look at IPcop firewall/router/VPN 
(http://www.ipcop.com) and run a gateway on a old machine. IPcop is 
perfect with 1 IP and a free USB ADSL router  ;)

-----------------------

Wayne Clancy
System Administrator 
Iris Financial Engineering
10 Old Jewry, London, EC2R 8DN

Phone:    +44 (0) 20 7776 6999
Direct:   +44 (0) 20 7776 6970
Mobile:   +44 (0) 7958 044196 
Fax:      +44 (0) 20 7600 5612

www.irisfinancial.com



 

Mark Preston wrote:

> On Thu, 12 Feb 2004, Harry Mantheakis wrote:
>
>> / I know that implementing computer security is, like home security, an
>
> />/ exercise in judging which risks are acceptable, and which are not.
> />/ />/ The problem is, I have no idea how to make that judgement with 
> computers!
> />/ />/ So my question is: what would you consider to be the *basic* 
> and *essential*
> />/ steps to take in respect of setting up a firewall?/
>
>
>
> To be secure, if you are hosting a service which is to be made 
> available outside of you small home network, such as HTTP, I believe 
> you would benefit by having static IP-addresses, with Four allocated 
> addresses (two usable). A simple 1 ip-address setup and a free USB 
> ADSL modem is not ideal for this to be secure.
> ukfsn.org offers this option , as do many other ISPs.
>
> Go to http://www.ossi.co.uk/ and click on Magazine and then Linux 
> Firewalling for a fairly detailed article which you might find useful.
> Regards,
> Mark Preston
>
>

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug