How to use Firewall Builder to set up firewall

[Anirvinya]

Hi all,

I am network engineer. I need some firewall that specifications should filtering policies, including iptables and various languages used by Cisco and Linksys routers. This allows me to define practical strategies and concrete realization of this strategy phase separation method allows me to run when hardware changes without having to re-define the platform, firewall policy. i heard that Firewall Builder. Can any body define me, How to use Firewall Builder to set up firewall. Thanks in advance.

[Steve123]

Fwbuilder software installation package can be Ubuntu Hardy and Fedora 9 software warehouse. In addition, for the openSUSE 10.3 version of the Fwbuilder has been packaged into a key installation files, but it does not support the version of openSUSE 11. I will build a test platform for 64-bit machine, the operating system of choice is Fedora 9, installed version is 2.1.19 version of fwbuilder. You must first install the libfwbuilder this file, install the two files using regular file installation method, that is, in turn enter the following command:

. / configure;

sudo make install when it comes to configuration, sometimes encounter such a warning:

Running qmake: / usr/lib64/qt-3.3/bin/qmake
WARNING: icns.path is not defined: install target not created

Check and reply.

[Shen]

When you start fwbuilder, you will see,the new firewall window. The firewall by right-clicking an entry in tree view, you can create a new firewall. If you choose to enable the firewall template and create a iptables firewall, you will see a new dialog box displays the window. As a series of firewalls fwbuilder for you to choose, which can basically meet the firewall templates the use of many users demand, it is very easy fwbuilder entry. The template which provides by your ISP support the distribution of dynamic IP addresses (DHCP) and your server's second network interface on the local fixed private subnet. It has three interfaces on the server has a static IP address of one Internet connection, another one to connect the local private subnet, the last one can be connected to a network interface Internet landing DMZ sub-network. All the best.

[Big Fish]

In Firewall Builder, when you have your own copy of the SSH service port definition, you can edit it freely. If you want to use their own definitions of the SSH service, you can view it from the left side of the tree drag and drop into your firewall rules pane. While all this is working well, but it may have a user interface problem is, if it is in standard definition (system) directory and user directory of the SSH service with the same name, when you drag to your custom SSH service to the firewall Rules pane, you will see two panes of the SSH projects, but not the slightest indication that one is your personal directory version, while the other is a standard (system) catalog version. Of course, it's easy to solve this problem, you only need to rename your user directory in the SSH service can be. Thanks.

[Zachary]

When you click on the left side of the tree displayed in the firewall itself, or in any firewall policy top of the window grid, you can edit the host and firewall settings. In the Host Settings option choices you will find specific tools on the computer to set the path options, including the rewriting of various TCP settings, such as FIN and keep-alive timeout, as well as change the Explicit Congestion Notification (ECN) and timestamps , as well as SYN cookies. In addition, the host options include open kernel anti spoofing support, source routing should be ignored, how to deal with the different ICMP packets, etc., in the template a default configuration of the firewall, and does not explicitly change these settings. All the best.

[Snake08]

Fwbuilder a particularly useful feature is that you can see all of your NAT and firewall policy used by the service. When you are on the left tree view or in the top of the window pane, right-click the service, the pop-up menu, select "Where used", then bottom of the window will pop up a child window, allowing you to quickly see which NAT or firewall rules references to these services. This also allows you to examine what is able to connect to these services, to determine whether the implementation of NAT only to enable the service to be used. Check and reply.