Linux open source firewall.

[devpat]

hello hi guys thank you for helping me before and now i am here again to know linux open source firewall applications. i want want to let you know that i am newly working on linux so kinly help me with better support.

[Calvin K]

Firestarter is an Open Source visual firewall program. The software aims to combine ease of use with powerful features, therefore serving both Linux desktop users and system administrators.

* Open Source software, available free of charge
* User friendly, easy to use, graphical interface
* A wizard walks you through setting up your firewall on your first time
* Suitable for use on desktops, servers and gateways
* Real-time firewall event monitor shows intrusion attempts as they happen
* Enables Internet connection sharing, optionally with DHCP service for the clients
* Allows you to define both inbound and outbound access policy
* Open or stealth ports, shaping your firewall policy with just a few mouse clicks
* Enable port forwarding for your local network in just seconds
* Option to whitelist or blacklist traffic
* Real time firewall events view
* View active network connections, including any traffic routed through the firewall
* Advanced Linux kernel tuning features provide protection from flooding, broadcasting and spoofing
* Support for tuning ICMP parameters to stop Denial of Service (DoS) attacks
* Support for tuning QoS parameters to improve services for connected client computers
* Ability to hook up user defined scripts or rule sets before or after firewall activation
* Supports Linux Kernels 2.4 and 2.6
* Translations available for many languages
http://www.fs-security.com/

[SalVatore]

SmoothWall is a control system specifically designed to perfectly to route. In addition, there are several routing functions achieve everything in order and control. There is a built-in firewall log files,but also indicators that show how much CPU or memory

download SmoothWall from here http://www.smoothwall.org/ and install it

The setting is like in each router: Mac address copy of the previous router, but this SmoothWall you say what network and what the export controls.

Red and Green are the network cards listed.
Where the MAC, IP and netmask in to fill.



The operation of SmoothWall 3.0.
Smooth Wall is divided into 2 pieces. One console that you see if you have a screen connected to the PC and a Web page you see when you log into the router. In the console you little or nothing to do because you all through your browser can arrange.






The Firewall in the smooth wall is very extensive including an IP block and a visible list of IPs it through. If you press an IP opens a small "window" which states: Lookup / block.If you press the lookup for you where the IP is, the change is to block him in the IP block list to continue. You can also get a logfile on Export button so you get the whole file.





After that, smooth wall faster and does not always have to restart, because you make something.There are also easy to make backups of your data. Furthermore there is a sub in the last update wizard so you can push it to updates and you can install them.





download from here http://www.smoothwall.org/

[Shubodh]

Zorp GPL

Zorp is a new generation proxy firewall suite and as such its core architecture is built around today's security demands: it uses application level proxies, it is modular and component based,

* Using script language as configuration and decision language(Python)
* Supported protocols:
o HTTP/1.1
o FTP
o SSL
o finger
o plug
o whois
o telnet
* Utilizing modular application gateways
* Able to analyze sub-protocols (for example HTTP in SSL)
* Can add/remove packet filter rules on-demand
* You can write your own proxy modules in Python if a native version is not available

[Lillebror]

LutelWall

LutelWall is high-level Linux firewall configuration tool. It uses human-readable and easy to understand configuration to set up Netfilter in the most secure way. The flexibility of LutelWall allows firewall adminstrators build very simple, single-homed firewalls, and most complex ones - with multiple subnets, DMZ's and traffic redirections.

Security features:

* Stateful TCP connection tracking with restrictive TCP chain
* Blocking all stealth mode scans (FIN, Xmas Tree, Null, Windows scan or ACK scan modes (nmap -sF -sX -sN -sW -sA)
* Blocking IP protocol scans (nmap -sO)
* Blocking UDP scans (nmap -sU)
* Blocking identification via TCP/IP fingerprinting (nmap -O)
* Anti-spoof protection, including protection for aliases
* Anti-smurf protection
* TCP SYN Flood protection
* UDP / ICMP Flood protection
* IANA reserved addresses checking
* SYSCTL parameters set for increased strength

[Snake08]

Fire Starter
Fire Starter is probably the best known GUI firewall for Ubuntu. While I was here a story to write, I find that it is not a very good GUI for iptables to set up. The project is located in a while still, it crashes when you select the lock option (only restarting the computer helps) and does not require that your firewall will automatically boot to a reboot.

Gaurddog
Previously, Guarddog especially on other distributions of Linux, but the declining popularity of Fire Starter and the many possibilities of this GUI Guarddog increasingly popular. Because Guarddog so extensive, it is not recommended to Guarddog to work, because the chances are that you walk through the trees no longer see the forest.

Guarddog can install via the terminal window by typing this command:
Code

sudo apt-get install guarddog

Guarddog Once installed, you can through the terminal window type gksu guarddog because you would not have enough access to the firewall to fit. The first time you get to see a warning stating that he no database, but this is because the program never started. Once you get yourself in Guarddog another warning, stating that the program only started at the time you press the OK or Apply. Apply pressure immediately, because from that moment you have no more connection to the Internet.

Home is also wise to include FTP, POP3, SMTP, MSN Messenger and select it. FTP is used for file upload and download. POP3 use at the time you send an email. SMTP is used to receive messages. MSN Messenger is the port for all programs that can deal with the MSN Messenger network.

The beginning of your configuration is now made. Guarddog has the possibility to export this configuration to a file. This is done to the Advanced tab to go. On the right you see a white area where you fill in the properties of your configuration can fill. These are meegeschreven to your back-up. Now press "Export" and choose a name and storage. At the time that you have made many changes and the wood for the trees no longer see you can simply turn on "Import" button.

But this function is more versatile. If your computer used as server, there are often specific ports open to your server to keep running. If you already have established export ports to your configuration. If your server is overturned and you have without thinking about your entire computer by securing all ports close to throwing, you do not want half hours dealing with the writing of the correct ports open again. You simply press the "back to factory settings" under the Advanced tab and apply the modification. All ports are now closed. If everything repaired / adjusted, you import your server configuration and everything is running again.

Guarddog also has the possibility to "Zones" to make. A zone shall be in effect for that particular IP addresses separately accessible, allowing a potential hacker can not come only components in on that area. A short example. Suppose you create a separate zone for your mail.

[Spyrus]

Lokkit
Lokkit is a program written specifically for the home, garden and kitchen user of Linux. It is a simple text based program, meaning that it is in the terminal window is running and has few institutions.

You install Lokkit in the terminal window with the command
Code

sudo apt-get install lokkit

Below is the start by "sudo lokkit" as commands to use. Here not gksu, because Lokkit has no GUI. If you start the program you see immediately that the possibilities are limited. You can choose from high, low or no security. In the second screen you can tick a few exceptions and a number of add.

For those who still prefer to see a graphical interface, there is also the gnome-lokkit. This is installed via the command:
Code

sudo apt-get install gnome-lokkit

Startup goes through the terminal window by typing the following:
Code

"sudo gnome-lokkit"

There are a number of questions, without the possibility of a different answer. You take care of this for you easily and quickly against the average hacker .Virus-free Linux