You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
90 lines
1.3 KiB
90 lines
1.3 KiB
5 years ago
|
= Iptables with shorewall!
|
||
|
|
Apostolos rootApostolos@swarmlab.io
|
||
|
|
// Metadata:
|
||
|
|
:description: Intro and Install
|
||
|
|
:keywords: sec, tcpdump
|
||
|
|
:data-uri:
|
||
|
|
:toc: right
|
||
|
|
:toc-title: Πίνακας περιεχομένων
|
||
|
|
:toclevels: 4
|
||
|
|
:source-highlighter: highlight
|
||
|
|
:icons: font
|
||
|
|
:sectnums:
|
||
|
|
|
||
|
|
include::header.adoc[]
|
||
|
|
|
||
|
|
|
||
|
|
{empty} +
|
||
|
|
|
||
|
|
|
||
|
|
[[cheat-Docker]]
|
||
|
|
== Install swarmlab-sec (Home PC)
|
||
|
|
|
||
|
|
HowTo: See http://docs.swarmlab.io/lab/sec/sec.adoc.html
|
||
|
|
|
||
|
|
|
||
|
|
.NOTE
|
||
|
|
[NOTE]
|
||
|
|
====
|
||
|
|
Assuming you're already logged in
|
||
|
|
====
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
== shorewall
|
||
|
|
|
||
|
|
|
||
|
|
**Shorewall** is an open source firewall tool for Linux that builds upon the Netfilter (iptables/ipchains) system built into the Linux kernel, making it easier to manage more complex configuration schemes by providing a higher level of abstraction for describing rules using text files.
|
||
|
|
|
||
|
|
https://en.wikipedia.org/wiki/Shorewall[More: wikipedia]
|
||
|
|
|
||
|
|
|
||
|
|
=== Installation
|
||
|
|
|
||
|
|
Shorewall is already installed on swarmlab-sec.
|
||
|
|
|
||
|
|
|
||
|
|
== Basic Two-Interface Firewall
|
||
|
|
|
||
|
|
|
||
|
|
basics.png[Basic Two-Interface Firewall]
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
.connect to master first
|
||
|
|
[NOTE]
|
||
|
|
====
|
||
|
|
|
||
|
|
Assuming you're already logged in master!
|
||
|
|
|
||
|
|
swarmlab-sec login
|
||
|
|
====
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
:hardbreaks:
|
||
|
|
|
||
|
|
{empty} +
|
||
|
|
{empty} +
|
||
|
|
{empty}
|
||
|
|
|
||
|
|
:!hardbreaks:
|
||
|
|
|
||
|
|
'''
|
||
|
|
|
||
|
|
.Reminder
|
||
|
|
[NOTE]
|
||
|
|
====
|
||
|
|
:hardbreaks:
|
||
|
|
Caminante, no hay camino,
|
||
|
|
se hace camino al andar.
|
||
|
|
|
||
|
|
Wanderer, there is no path,
|
||
|
|
the path is made by walking.
|
||
|
|
|
||
|
|
*Antonio Machado* Campos de Castilla
|
||
|
|
====
|