HO messo in piedi un piccolo server domestico con Ubuntu 7.1 con le seguenti funzioni:
- router
- firewall
- fileserver
hag fastweb
|
|
eth0 (dhcp)
|
Ubuntu server (192.168.1.1)
|
eth1
|
|
---pc windows (ip assegnato tramite dhcp)
---pc con mulo (ip fisso: 192.168.1.2)
---stmpante lan (ip fisso: 192.168.1.3)
---xbox1 con media center (ip fisso: 192.168.1.4)
Visto che non ho alcuna esperienza in tema di firewall, apprezzerei moltissimo un aiuto
per controllare se le impostazioni che ho addottato con shorewall non sono assurde.
Di seguito ho riportato le tabelle della configurazione di Shorewall visibili con Webmin
Network Zones
Zone ID----Zone Type
fw---------Firewall system
net--------Ipv4
loc-------- Ipv4
Network Interfaces
Interface--------Zone name------Broadcast address-----Options
eth0-------------net-----------Automatic-------------dhcp,routerfilter,tcpflags,nobogons
eth1-------------loc-----------Automatic-------------dhcp
Masquerading
Outgoing interface------Network to masquerade
eth0-------------------Network on eth1
Firewall Rules
Action---------Source---------Destination---------------------Protocol------Source ports----Destination ports
LOG----------Zone loc-------Firewall------------------------TCP----------Any-------------22
LOG----------Zone loc-------Firewall------------------------TCP----------Any-------------10000
ACCEPT------Firewall--------Zone net-----------------------ICMP---------Any
ACCEPT------Firewall--------Zone net-----------------------TCP----------Any-------------25
ACCEPT------Firewall--------Zone net-----------------------UDP----------Any-------------53
ACCEPT------Firewall--------Zone net-----------------------TCP----------Any-------------53
ACCEPT------Firewall--------Zone net-----------------------TCP----------Any-------------80
ACCEPT------Firewall--------Zone net-----------------------TCP----------Any-------------143
ACCEPT------Firewall--------Zone net-----------------------TCP----------Any-------------443
ACCEPT------Firewall--------Zone net-----------------------TCP----------Any-------------465
ACCEPT------Firewall--------Zone net-----------------------TCP----------Any-------------993
ACCEPT------Firewall--------Host 192.168.1.2 in zone net----TCP----------Any-------------4662
ACCEPT------Firewall--------Host 192.168.1.2 in zone net----UDP----------Any-------------4672
Cosa posso/devo modificare/implementare/tagliare ?
Grazie in anticipo !!
