|
Donation/Premium |
|
 |
|
|
|
|
|
|
|
 |
 |
| View previous topic :: View next topic |
| Author |
Message |
tanstaafl
Cadet

 Joined: Aug 06, 2003 Posts: 2 Location: USA
|
Posted: Wed Aug 06, 2003 9:12 am Post subject: What linux firewall supports outbound connections? |
|
|
Can somebody recommend a linux firewall that supports outbound connections similar to what Zone Alarm and Kerio Personal Firewall do under windows?
The closest I could find were Pyrewall, Astaro, and Firestarter. However, Pyrewall appears to still be in the planning stage, Astaro seems to rely upon the application being configured to call an application proxy, and the manual for Firestarter doesn't give any hint of application specific rules.
I realize the conventional viewpoint is that iptables/netfilter is sufficient, but if nothing else I want it to protect myself when running windows applications under Wine.
Suggestions?
|
|
| Back to top |
|
 |
exception
Guest IP: 24.112.*.*
|
Posted: Fri Aug 08, 2003 5:17 am Post subject: |
|
|
The only thing I can think of that will 'filter' your outbound connection, is with the use of ipchains/tables. They're extremely usefull, and, although I'm not quite sure what you're trying to accomplish, they should hopefully be good enough for the job. You shouldn't need to download it, since they come with the kernel (2.4.20 kernel has built in ipchains/tables, not module). Also, with the snort rule set, you can set up some pretty nifty rules for your outbound, and incoming traffic.
On a side note, if you're running an application on wine, which isn't opensource and is an installer, I'd suggest putting it in a chroot jail, incase it might pose any threat of intrusion.
-exception
|
|
| Back to top |
|
 |
Paul
CastleCops Founder
 Joined: Feb 22, 2002 Posts: 27351
|
|
| Back to top |
|
 |
|
|
|
You can post new topics in this forum You can reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
Powered by phpBB © 2001 phpBB Group
|