Good newbie guide to Fedora firewall

[paulywauly]

Im trying to find some type of guide for making a simple good set of rules for a stand alone machine that is online with a reuter supplied by an isp provider??

[secipolla]

Disclaimer: I have no idea how much useful a firewall is but 'better safe than sorry' (not that I personally get sorry for anything...).

I am in a similar situation as you. I enter the router page and enable its built-in firewall.
Then I use system-config-firewall which is a layman's firewall GUI.
There's a page where we can block some services, I just block all.
Another page lets us allow some other things, I disallow every one of them (I don't even have a printer).
Everything works for me in terms of Internet.

So just use that, look at its tips and allow the least stuff you can.

[paulywauly]

i worked some with openbsd and its got some really screwy ways of firewall rules but i was wondering if fedora had a type rule set that goes something like block all in pass all out quick???

[secipolla]

I guess that would be the example I gave.
Run system-config-firewall (install it first if it isn't installed), block everything in the block page and don't allow anything in the allow page.

[aleph]

The Fedora Security Guide is a good starting point https://docs.fedoraproject.org/en-US...ide/index.html

There are sections on firewall, iptables and tcpwrapper.