iptables help

[yeleek]

I've made my suggestion - return to known good, then use the commands provided to create your iptables ruleset from a command prompt.

No offence but I would suggest your linux knowledge *may* not be up to rolling your own linux based solution.

Have you therefore considered something like http://www.pfsense.org/ - which is free. Web gui based and includes many features, including plugins for squid.
http://www.pfsense.org/index.php?opt...d=40&Itemid=43

http://doc.pfsense.org/index.php/Set...nsparent_Proxy

[GanIT]

Yeleek, you mean to say that there is no error in iptable service but some error with the rules I entered?

---------- Post added at 11:20 AM ---------- Previous post was at 11:02 AM ----------

Thank you Yeleek. As you're telling it appears to be an error with rules I used not with iptables. Yes its true that my knowledge in Linux is poor but I'm trying to learn it. I will look in to pfsense as well thank you again.

[yeleek]

Yes I believe in trying to resolve your issue, you've now got a problem with the service. Hence return to known good configuration files....

FYI - whatever you choose the following may help.

IPTABLES = a Firewall, specifcally a packet filtering firewall.

http://www.linuxhomenetworking.com/w...Using_iptables

SQUID = A proxy server i.e. setup so that client connections access the internet via this service. This service can cache web sites to make browsing quicker, it can also restrict access to defined websites.... if of course you configure IPTABLES to only accept web traffic from Squid. Otherwise people could just browse 'around' your squid implementation and go directly out.

http://www.linuxhomenetworking.com/w...ess_with_Squid

[GanIT]

It's been a loooooooonggg time. As I was Extremly busy with my work.... I have solved the issues and setup the the connection as I wanted by using webmin. instructions are on this link http://forums.fedoraforum.org/archive/index.php/t-156663.html check the last post posted by 'PCXO' member where he has given complete instructions on webmin.

Who ever want to setup a connection like me read that post.. ENJOY!!!!!

[6e617a696d]

everything is quite simple

iptables config file is: /etc/sysconfig/iptables
1) if you adding iptables rules "on-line" you should run: iptables-save /etc/sysconfig/iptables
2) if you editing /etc/sysconfig/iptables this will require service reboot, if you did something wrong in config file iptables won't start.

[chinamike]

Looking for a good, howto and walk through with realistic examples to understand "system-config-firewall" in Fed 17. Below is one of a few I found while G'ing:

http://www.linuxhomenetworking.com/w...les#Conclusion

When I arrived there, I was not paying attention to the right-side scroll bar "nub size" and later, after reading for 15 minutes, saw that the page was actually quite involved, nothing what so ever being quick! It is no wonder the average person doesn't want to get under the hood of their respective computer device's OS and related functions!

I on the other hand LOVE Linux based systems and all that goes with it, but come on! Don't title a page/guide "QUICK" when in fact it is basically a small novella on instruction!

Meanwhile, I am still searching for a simple understanding of:
what ports I may use/should use/should not use for...
masquerading and port forwarding (all the choices have 3-5 letter descriptives after each port, which I have no idea what even they mean).

I want to find a walk through with actual examples. Putting in real port numbers and why it's OK or not OK.
----------------------------------------------------------------------------------------------------
example: I found this at techrepublic.com under the title firewall-configuration-with-system-config-firewall:

"The Other Ports section allows you to add new ports to filter that are not in the Trusted Services list. It pulls up a scrollable interface that lists the ports and protocols as defined in /etc/services, so all known ports and protocol types will be listed here. If there is a custom service you want that is not listed, select User Defined and provide the port and protocol manually."...ZERO example(s).

To teach and to teach effectively, examples always must be present. None were, therefore this page comes across like a "stumbledupon" article by a non-expert.

If anyone can direct me to either a downloadable pdf or torrent that has examples and walk throughs, otherwise I will never understand "system-config-firewall".