Newsgroup: it.comp.os.linux.iniziare
Titolo: Mandrake e firewall guarddog

Ho installato queso firewall seguendo il tutorial al seguente
indirizzo:
http://www.pc-facile.com/linux_firewall_configurazione_pacchetto_guarddog_t165625/
e fin qui tutto ok.
Arrivato al punto in cui dice :
-------------------------------------------
PROBLEMI RISCONTRATI
E' possibile, dopo aver riavviato il computer, che non venga caricato
il firewall impostato mediante guarddog: è facilmente verificabile
mediante il comando iptables -L impartito da root in una console. Se
appariranno poche righe (una decina circa), di cui alcune contenenti la
dicitura ACCEPT, allora il firewall è disattivato: chiudere subito la
connessione internet.
-------------------------------------------
Ho quindi modificato il file /etc/rc.local, ho salvato tutto e ho
riavviato.
Quando ho poi rilanciato il comando iptables -L (in fondo riporto le
righe restituite ) mi ritrovo comunque la dicitura ACCEPT, anche se mi
restituisce piu´ delle dieci righe di prima. Non essendo esperto in
Linux volevo solo capire se il firewall e' attivo o no.
Ancora solo una cosa: quando mi ritrovo con l´utenza di root, per
modificare un file (in questo caso /etc/rc.local) esiste un editor un
po' piu' semplice del vi?
Grazie e scusatemi pel la lunghezza della domanda.
Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
logaborted  tcp  --  anywhere             anywhere            state
RELATED,ESTA
BLISHED tcp flags:RST/RST
ACCEPT     all  --  anywhere             anywhere            state
RELATED,ESTAB
LISHED
ACCEPT     icmp --  anywhere             anywhere            icmp
destination-un
reachable
ACCEPT     icmp --  anywhere             anywhere            icmp
time-exceeded
ACCEPT     icmp --  anywhere             anywhere            icmp
parameter-prob
lem
nicfilt    all  --  anywhere             anywhere
srcfilt    all  --  anywhere             anywhere
Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            state
RELATED,ESTAB
LISHED
ACCEPT     icmp --  anywhere             anywhere            icmp
destination-un
reachable
ACCEPT     icmp --  anywhere             anywhere            icmp
time-exceeded
ACCEPT     icmp --  anywhere             anywhere            icmp
parameter-prob
lem
srcfilt    all  --  anywhere             anywhere
Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere            state
RELATED,ESTAB
LISHED
ACCEPT     icmp --  anywhere             anywhere            icmp
destination-un
reachable
ACCEPT     icmp --  anywhere             anywhere            icmp
time-exceeded
ACCEPT     icmp --  anywhere             anywhere            icmp
parameter-prob
lem
s1         all  --  anywhere             anywhere
Chain f0to1 (1 references)
target     prot opt source               destination
logdrop    all  --  anywhere             anywhere
Chain f0to2 (0 references)
target     prot opt source               destination
logdrop    all  --  anywhere             anywhere
Chain f1to0 (1 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             anywhere            tcp
spts:1024:cvsup
 dpt:ftp state NEW
ACCEPT     tcp  --  anywhere             anywhere            tcp
spts:1024:cvsup
 dpt:http state NEW
ACCEPT     tcp  --  anywhere             anywhere            tcp
spts:1024:cvsup
 dpt:webcache state NEW
ACCEPT     tcp  --  anywhere             anywhere            tcp
spts:1024:cvsup
 dpt:http-alt state NEW
ACCEPT     tcp  --  anywhere             anywhere            tcp
spts:1024:cvsup
 dpt:8000 state NEW
ACCEPT     tcp  --  anywhere             anywhere            tcp
spts:1024:cvsup
 dpt:8888 state NEW
ACCEPT     tcp  --  anywhere             anywhere            tcp
spts:1024:cvsup
 dpt:https state NEW
ACCEPT     tcp  --  anywhere             anywhere            tcp
dpt:domain stat
e NEW
ACCEPT     udp  --  anywhere             anywhere            udp
dpt:domain
logdrop    all  --  anywhere             anywhere
Chain f1to2 (0 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             anywhere            tcp
spts:1024:cvsup
 dpt:pop3 state NEW
ACCEPT     tcp  --  anywhere             anywhere            tcp
dpt:domain stat
e NEW
ACCEPT     udp  --  anywhere             anywhere            udp
dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp
spts:1024:cvsup
 dpt:smtp state NEW
logdrop    all  --  anywhere             anywhere
Chain f2to0 (1 references)
target     prot opt source               destination
logdrop    all  --  anywhere             anywhere
Chain f2to1 (1 references)
target     prot opt source               destination
logdrop    all  --  anywhere             anywhere
Chain logaborted (1 references)
target     prot opt source               destination
logaborted2  all  --  anywhere             anywhere            limit:
avg 1/sec
burst 10
LOG        all  --  anywhere             anywhere            limit: avg
2/min bu
rst 1 LOG level warning prefix `LIMITED '
Chain logaborted2 (1 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere            LOG level
warning t
cp-sequence tcp-options ip-options prefix `ABORTED '
ACCEPT     all  --  anywhere             anywhere            state
RELATED,ESTAB
LISHED
Chain logdrop (8 references)
target     prot opt source               destination
logdrop2   all  --  anywhere             anywhere            limit: avg
1/sec bu
rst 10
LOG        all  --  anywhere             anywhere            limit: avg
2/min bu
rst 1 LOG level warning prefix `LIMITED '
DROP       all  --  anywhere             anywhere
Chain logdrop2 (1 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere            LOG level
warning t
cp-sequence tcp-options ip-options prefix `DROPPED '
DROP       all  --  anywhere             anywhere
Chain logreject (0 references)
target     prot opt source               destination
logreject2  all  --  anywhere             anywhere            limit:
avg 1/sec b
urst 10
LOG        all  --  anywhere             anywhere            limit: avg
2/min bu
rst 1 LOG level warning prefix `LIMITED '
REJECT     tcp  --  anywhere             anywhere
reject-with tcp-res
et
REJECT     udp  --  anywhere             anywhere
reject-with icmp-po
rt-unreachable
DROP       all  --  anywhere             anywhere
Chain logreject2 (1 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere            LOG level
warning t
cp-sequence tcp-options ip-options prefix `REJECTED '
REJECT     tcp  --  anywhere             anywhere
reject-with tcp-res
et
REJECT     udp  --  anywhere             anywhere
reject-with icmp-po
rt-unreachable
DROP       all  --  anywhere             anywhere
Chain nicfilt (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere
logdrop    all  --  anywhere             anywhere
Chain s0 (1 references)
target     prot opt source               destination
f0to1      all  --  anywhere             localhost
logdrop    all  --  anywhere             anywhere
Chain s1 (1 references)
target     prot opt source               destination
f1to0      all  --  anywhere             anywhere
Chain s2 (0 references)
target     prot opt source               destination
f2to1      all  --  anywhere             localhost
f2to0      all  --  anywhere             anywhere
Chain srcfilt (2 references)
target     prot opt source               destination
s0         all  --  anywhere             anywhere

 po' piu' semplice del vi?
diversi, pico, ad es.
personalmente uso l'accoppiata mc (file manager) e mcedit;
r
-- 
piccola guida all'installazione della Slackware 9.1 e del 
modem manta:
http://www.umpf.net/ramapage/