Difference between revisions of "Setup basic firewall"
From Salix OS
(Formatting fixes) |
|||
| Line 1: | Line 1: | ||
You can setup a secure basic firewall using the "Uncomplicated Firewall or UFW". | You can setup a secure basic firewall using the "Uncomplicated Firewall or UFW". | ||
| − | sudo slapt-get -i gufw | + | sudo slapt-get -i gufw |
| − | then | + | then |
| − | + | sudo gufw | |
| − | + | click status to "on". This will setup a deny all incoming and allow all outgoing firewall. | |
| − | + | Alternatively, you can | |
| − | + | sudo slapt-get -i ufw | |
| + | sudo ufw enable | ||
| + | sudo ufw default deny | ||
| + | sudo ufw deny ssh | ||
This method will deny all incoming connections and allow outgoing but also deny ssh connections to further protect your system. | This method will deny all incoming connections and allow outgoing but also deny ssh connections to further protect your system. | ||
| Line 17: | Line 20: | ||
Note: if you require ssh connections then of course do not block it, if you are not sure what ssh (Secure Shell) is, then block it as it will make the system more secure. | Note: if you require ssh connections then of course do not block it, if you are not sure what ssh (Secure Shell) is, then block it as it will make the system more secure. | ||
| − | For both methods make sure you copy, | + | For both methods make sure you copy, open /etc/rc.d/rc.local with your favourite editor (for example vi): |
| − | + | sudo vi /etc/rc.d/rc.local | |
| − | + | and paste the following into it. This will allow the firewall to start with each boot. | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| + | if [ -x /lib/ufw/ufw-init ]; then | ||
| + | /lib/ufw/ufw-init start | ||
| + | fi | ||
[[Category:FAQ]] | [[Category:FAQ]] | ||
Revision as of 10:44, 15 May 2016
You can setup a secure basic firewall using the "Uncomplicated Firewall or UFW".
sudo slapt-get -i gufw
then
sudo gufw
click status to "on". This will setup a deny all incoming and allow all outgoing firewall.
Alternatively, you can
sudo slapt-get -i ufw sudo ufw enable sudo ufw default deny sudo ufw deny ssh
This method will deny all incoming connections and allow outgoing but also deny ssh connections to further protect your system.
Note: if you require ssh connections then of course do not block it, if you are not sure what ssh (Secure Shell) is, then block it as it will make the system more secure.
For both methods make sure you copy, open /etc/rc.d/rc.local with your favourite editor (for example vi):
sudo vi /etc/rc.d/rc.local
and paste the following into it. This will allow the firewall to start with each boot.
if [ -x /lib/ufw/ufw-init ]; then /lib/ufw/ufw-init start fi
