Web Hosting
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsWeb HostingWeb Hosting

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old January 19th, 2005, 10:59 AM
morphdemo morphdemo is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Sep 2004
Posts: 59 morphdemo User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 3 h 22 m 8 sec
Reputation Power: 5
Installing firewall help

hey I got this off another site... I want to install it however
im abit stuck after the first bit

I get this, that seems easy ...

cd /usr/src
wget http://rfxnetworks.net/downloads/apf-current.tar.gz
tar -zxf apf-current.tar.gz
cd apf-0.*
./install.sh


Now edit config file
#pico -w /etc/apf/conf.apf

Change the following:
USE_DS="1"
USE_AD="1"



But after that whats all this mean



Scroll down to this section:


# Common ingress (inbound) TCP ports IG_TCP_CPORTS="20,21,22,25,26,53,80,110,143,443,465,993,995,2082,2083,2086,2087,2095,2096"
# Common ingress (inbound) UDP ports
IG_UDP_CPORTS="21,53,465,873"

# Common ICMP (inbound) types
# 'internals/icmp.types' for type definition; 'all' is wildcard for any
IG_ICMP_TYPES="3,5,11,0,30,8"


Scroll down a bit then find this section:

EGF="1"
# Common egress (outbound) TCP ports EG_TCP_CPORTS="21,22,25,26,27,37,43,53,80,110,113,443,465,873,2089"
# Common egress (outbound) UDP ports
EG_UDP_CPORTS="20,21,53,123,465,873"


Save the file and start apf via.
apf -s
If everything still works then edit the config file and turn dev mode off.
DEVM="0"

Now restart APF
#apf -r






----------

A firewall should be the first thing installed.. I recommend advanced protection firewall (APF) by rfxnetworks. APF will block unused outgoing and incoming ports. It can also be configured to use information from some block lists.
http://rfxnetworks.net/apf.php

#cd /usr/src
#wget http://rfxnetworks.net/downloads/apf-current.tar.gz
#tar -zxf apf-current.tar.gz
#cd apf-0.*
#./install.sh

Now edit config file
#pico -w /etc/apf/conf.apf

Change the following:
USE_DS="1"
USE_AD="1"


Scroll down to this section:


# Common ingress (inbound) TCP ports IG_TCP_CPORTS="20,21,22,25,26,53,80,110,143,443,465,993,995,2082,2083,2086,2087,2095,2096"
# Common ingress (inbound) UDP ports
IG_UDP_CPORTS="21,53,465,873"

# Common ICMP (inbound) types
# 'internals/icmp.types' for type definition; 'all' is wildcard for any
IG_ICMP_TYPES="3,5,11,0,30,8"


Scroll down a bit then find this section:

EGF="1"
# Common egress (outbound) TCP ports EG_TCP_CPORTS="21,22,25,26,27,37,43,53,80,110,113,443,465,873,2089"
# Common egress (outbound) UDP ports
EG_UDP_CPORTS="20,21,53,123,465,873"


Save the file and start apf via.
apf -s
If everything still works then edit the config file and turn dev mode off.
DEVM="0"

Now restart APF
#apf -r

http://www.webhostingtalk.com/showthread.php?s=&threadid=307474

Reply With Quote
  #2  
Old January 19th, 2005, 12:54 PM
monsterhosting's Avatar
monsterhosting monsterhosting is offline
Moderator
Dev Shed Novice (500 - 999 posts)
 
Join Date: Aug 2003
Location: Vancouver, BC
Posts: 889 monsterhosting User rank is Second Lieutenant (5000 - 10000 Reputation Level)monsterhosting User rank is Second Lieutenant (5000 - 10000 Reputation Level)monsterhosting User rank is Second Lieutenant (5000 - 10000 Reputation Level)monsterhosting User rank is Second Lieutenant (5000 - 10000 Reputation Level)monsterhosting User rank is Second Lieutenant (5000 - 10000 Reputation Level)monsterhosting User rank is Second Lieutenant (5000 - 10000 Reputation Level)monsterhosting User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 9 h 57 m 24 sec
Reputation Power: 61
Send a message via AIM to monsterhosting Send a message via MSN to monsterhosting
In all honesty I do not think it is smart nor secure to discuss your firewall setup in a forum.
__________________
Gary Jones

BlueFur.com - Canada Web Hosting

Reply With Quote
  #3  
Old January 19th, 2005, 04:07 PM
flashwebhost flashwebhost is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Aug 2002
Location: /home
Posts: 79 flashwebhost User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 9 h 53 m 18 sec
Reputation Power: 0
Send a message via Yahoo to flashwebhost
Its simple to install, first download APF Firewall

# cd
# wget http://rfxnetworks.net/downloads/apf-current.tar.gz

Then uncomptress it

# tar -zxvf apf-current.tar.gz

then go to the folder

# cd apf-0.*

Now install the Firewall

# ./install.sh

Now your firewall is installed and you need to configure it. You can do this by editing conf.apf file, go through the comments and try to understand :-)

# vi /etc/apf/conf.apf

If you need any help, PM me.
__________________
http://www.BizHat.com

Reply With Quote
  #4  
Old January 19th, 2005, 07:48 PM
morphdemo morphdemo is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Sep 2004
Posts: 59 morphdemo User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 3 h 22 m 8 sec
Reputation Power: 5
This is just of another forum .. there are no server login details etc...


thanks its set up now

Reply With Quote
Reply

Viewing: Dev Shed ForumsWeb HostingWeb Hosting > Installing firewall help


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump

 Free IT White Papers!
 
How to Present Effectively Online
This white paper offers practical and actionable advice on the key steps that any presenter should consider as they plan and execute a Webinar or online meeting.

 
Open Source Security Myths
Open Source Software (OSS) is computer software whose source code is available to the general public with relaxed or non-existent intellectual property restrictions (or arrangement such as the public domain), and is usually developed with the input of many contributors.

 
Power and Cooling Capacity Management for Data Centers
This paper describes the principles for achieving power and cooling capacity management.

 
Scalable, Fault-Tolerant NAS for Oracle - The Next Generation
For several years NAS has been evolving as a storage alternative for Oracle databases, and for good reason: NAS is quite often the simplest, most cost-effective storage approach for Oracle. Learn about the benefits that HP's approach to scalable NAS brings to Oracle environments in this comprehensive white paper.

 
Understanding Web Application Security Challenges
This white paper discusses many common threats and preventive measures for Web application security, and explains what you can do to help protect your organization.

 

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 3 hosted by Hostway
Stay green...Green IT