Firestarter On Startup

[Matt]

Heya shanenin. I just got back home. Have you had a chance to mess around with it?

[shanenin]

Not yet. I am going to install it with vmware.

edit added//

I just got vmware installed.

[Matt]

Hi shanenin. I've finally given up of Firestarter.

Since Firestarter is just a frontend to iptables, I decided I would setup iptables myself and have that load on bootup. Here's what I did:

iptables -F
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables-save > /etc/iptables.up.rules

Then, I edited /etc/network/interfaces as follows:

auto eth0
iface eth0 inet dhcp
  pre-up iptables-restore < /etc/iptables.up.rules

(The last line was added)

At the first couple of tries, my computer passes HackerWatch and Shields Up tests right from bootup; however, I would like to know if you see any issues with my iptables rules.

Finally, I want to remove Firestarter and all the stuff we created. What is the best way to go about that?

[shanenin]

I think that was smart of you to take the time to learn how to use iptables rules. I was never patient enough to learn. I have no advice to give.

As to cleaning up firestarter. First use the following command to remove all the symlinks

sudo update-rc.d -f firestarter remove

now lets remove the script from the directory /etc/init.d

sudo rm /etc/init.d/firestarter

then use apt-get or synaptic to uninstall firestarter

[Matt]

Fantastic. Looks like I've finally got a good-working firewall. I will post a new thread regarding my iptables setup. Thanks again for all your help shanenin!

[shanenin]

your welcome :-)

[RoLex]

Hey everyone.

I just wanted to tell that original Firestarter script works very well. You all are expecting it to show in system process list or starting the GUI. Well, it doesn't need to do that to be running. It's enough with configuring IPTables.

Here is what you need to do;

$ sudo cp /etc/firestarter/firestarter.sh /etc/init.d
$ sudo chmod +x /etc/init.d/firestarter.sh
$ sudo update-rc.d firestarter.sh defaults

After rebooting you can do following to test the firewall;

$ sudo /etc/firestarter/firestarter.sh status

Results are following: Firewall is running. Then, if you want to start GUI and see the events or configure traffic policy, it's your own business, you have to start it manually.

Edited October 23, 2007 by RoLex