[Primipassi] configurazione firestarter su ubuntu

hopfrog info@hopfrog.it
Ven 10 Mar 2006 07:52:23 CET


Qualcuno puņ darmi una mano per configurare un firewall. Attualmento sto
provando FIRESTARTER ma una volta avviato mi impedisce la navigazione.
Riporto la configurazione (ottenuta con iptables -L):
Chain INBOUND (4 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             anywhere            state
RELATED,ESTABLISHED
ACCEPT     udp  --  anywhere             anywhere            state
RELATED,ESTABLISHED
ACCEPT     all  --  www.tiscali.it       anywhere
ACCEPT     all  --  0.0.85.106           anywhere
LSI        all  --  anywhere             anywhere

Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     tcp  --  nsr2.tiscali.it      anywhere            tcp
flags:!SYN,RST,ACK/SYN
ACCEPT     udp  --  nsr2.tiscali.it      anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            limit: avg
10/sec burst 5
DROP       all  --  anywhere             255.255.255.255
DROP       all  --  anywhere            
host-84-220-55-16.cust-adsl.tiscali.it
DROP       all  --  BASE-ADDRESS.MCAST.NET/8  anywhere
DROP       all  --  anywhere             BASE-ADDRESS.MCAST.NET/8
DROP       all  --  255.255.255.255      anywhere
DROP       all  --  anywhere             0.0.0.0
DROP       all  --  anywhere             anywhere            state INVALID
LSI        all  -f  anywhere             anywhere            limit: avg
10/min burst 5
INBOUND    all  --  anywhere             anywhere
INBOUND    all  --  anywhere            
host-84-220-55-16.cust-adsl.tiscali.it
INBOUND    all  --  anywhere            
host-84-220-55-16.cust-adsl.tiscali.it
INBOUND    all  --  anywhere            
host-84-220-55-16.cust-adsl.tiscali.it
LOG_FILTER  all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere            LOG level
info prefix `Unknown Input'

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     icmp --  anywhere             anywhere            limit: avg
10/sec burst 5
TCPMSS     tcp  --  anywhere             anywhere            tcp
flags:SYN,RST/SYN TCPMSS clamp to PMTU
OUTBOUND   all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere            
host-84-220-55-16.cust-adsl.tiscali.it state RELATED,ESTABLISHED
ACCEPT     udp  --  anywhere            
host-84-220-55-16.cust-adsl.tiscali.it state RELATED,ESTABLISHED
LOG_FILTER  all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere            LOG level
info prefix `Unknown Forward'

Chain LOG_FILTER (5 references)
target     prot opt source               destination

Chain LSI (2 references)
target     prot opt source               destination
LOG_FILTER  all  --  anywhere             anywhere
LOG        tcp  --  anywhere             anywhere            tcp
flags:SYN,RST,ACK/SYN limit: avg 1/sec burst 5 LOG level info prefix
`Inbound '
DROP       tcp  --  anywhere             anywhere            tcp
flags:SYN,RST,ACK/SYN
LOG        tcp  --  anywhere             anywhere            tcp
flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5 LOG level info prefix
`Inbound '
DROP       tcp  --  anywhere             anywhere            tcp
flags:FIN,SYN,RST,ACK/RST
LOG        icmp --  anywhere             anywhere            icmp
echo-request limit: avg 1/sec burst 5 LOG level info prefix `Inbound '
DROP       icmp --  anywhere             anywhere            icmp
echo-request
LOG        all  --  anywhere             anywhere            limit: avg
5/sec burst 5 LOG level info prefix `Inbound '
DROP       all  --  anywhere             anywhere

Chain LSO (1 references)
target     prot opt source               destination
LOG_FILTER  all  --  anywhere             anywhere

Cosa devo correggere per poter accedere ad internet?
Grazie
Gfc




Maggiori informazioni sulla lista primipassi