|
马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。
您需要 登录 才可以下载或查看,没有账号?注册
×
www.fs-security.com
QUOTE
Every computer needs a good firewall for protection against various threats on the Internet. One recommendation is to use a hardware-based device to protect your computer or network, but an "out-of-the-box" device is not always sufficient--it may not be powerful enough, or it may not require the features you need. Fortunately, Linux makes a secure firewall, and with some older hardware, you can set up a dedicated firewall system.When you're working with a Linux firewall, manipulating iptables can be daunting. Even comprehensive packages like Shorewall require a fair amount of knowledge and time to configure. Using a GUI tool with a walk-through wizard, such as Firestarter, is typically much easier than fiddling with text-based configuration files and shell scripts. However, you should note that Firestarter still identifies iptables as a pre-requisite, because it simply configures iptables rules for your firewall.Firestarter uses an intuitive GUI interface to explain, step-by-step, each item that's configured. The initial wizard tells Firestarter whether or not you use DHCP, whether or not to allow Internet Connection Sharing (which is a must if you use the machine as a dedicated firewall for your network), and which is the internet-connected interface.Another nice feature about Firestarter is that you can define an outbound traffic policy, which allows you to be permissive or restrictive by default. You can fine-tune the services and sites that are denied or accessible. In addition, you can easily add a new rule by clicking on the list space in the Policy tab and selecting Add Rule. Common service names are listed for easy selection.With a slick GUI and comprehensive help, both in the program and online, Firestarter is an excellent firewall management tool. To download or find out more information about Firestarter, visit this Web site: http://www.fs-security.com/Delivered each Tuesday, TechRepublic's free Linux NetNote provides tips, articles, and other resources to help you hone your Linux skills. Automatically sign up today!
QUOTE
Key FeaturesOpen Source software, available free of charge Easy to use graphical interface Suitable for use on desktops, servers and gateways Enables Internet connection sharing Allows you to define both inbound and outbound access policy Option to whitelist or blacklist traffic Sets up DHCP for a local network Real time firewall events view View active network connections, including any traffic routed through the firewall Advanced Linux kernel tuning features |
|