Tiny Core Linux

Tiny Core Extensions => TCE Q&A Forum => Topic started by: ALBERT123 on January 03, 2011, 02:27:21 PM

Title: firewall questions - confused with the iptables
Post by: ALBERT123 on January 03, 2011, 02:27:21 PM
I downloaded the firewall through the apps browser
then I did iptables -vL and get the following
does that look ok ? it seems to ACCEPT everything, which is different from what I read somewhere  on this site

do we have to configure the firewall ourselves ?


Chain INPUT (policy ACCEPT 5016 packets, 5156bytes)
pkts bytes target   prot  opt in out source       destination

chain FORWARD (policy ACCEPT 0 packets, 0 bytes)

chain OUTPUT (policy ACCEPT 4790 packets, 583 bytes)
pkts bytes target prot   opt in out source     destination


Title: Re: firewall questions - confused with the iptables
Post by: thane on January 03, 2011, 03:43:54 PM
I haven't used iptables in a while, but did you follow these instructions?

Comments:       Iptables is the userspace tool to control
      the linux kernel firewall. A simple script
      included, suitable for home users.
-
      From a terminal:
      sudo /usr/local/sbin/basic-firewall
-
      From bootlocal.sh (to start on every boot):
      /usr/local/sbin/basic-firewall noprompt

These are in the info section for this extension on the downloads page.
Title: Re: firewall questions - confused with the iptables
Post by: ALBERT123 on January 03, 2011, 04:34:04 PM

thanks .  I got it now.

one more question just to help me in my learning :- 
when I installed IPTABLES  using  the "APPS" panel,  I had chosen "on boot" as my option ,  should it not load it automatically when I am rebooting again ?

why do we need to add it to the bootlocal.sh?

Title: Re: firewall questions - confused with the iptables
Post by: thane on January 03, 2011, 06:21:18 PM
Per a thread where I asked a similar question:

There is no firewall "program" that runs.  iptables firewalling happens in the kernel.  you can see the firewall rules that have been set by the basic script by running "sudo iptables -L" from a terminal

http://forum.tinycorelinux.net/index.php?topic=461.msg13873#msg13873

What you run from the terminal or bootlocal is a startup script.