Question Locked

Anyone have experience with Bastille Firewall? - need exceptions

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

For those not familiar, Bastille is a fantastic system security tool that asks you a set of questions and recommends hardening changes to your current system. I use it to provide a nice baseline from which I can continue to harden further by hand. It also includes firewall configuration if desired by the user.

I'm currently looking at using Bastille's firewalling config but first need to understand how I can add exceptions. I need to be able to hit the system with an iptables/ip6tables or quickly adjust a hosts.allow/hosts.deny type file; blocking specific IP or opening specific port/sourceIP combinations.

My past experience is with Shorewall and very basic iptables. Has anyone out there experience with Bastille's firewall? Would it be better disable Bastille's firewall rules and just use a basic iptables file?

2 replies

by jaqui

never found that a basic iptables firewall wasn't sufficient, so I've never looked at Bastille's firewall.

I haven't even looked at the new default with Mandriva, Invictus firewall.

This discussion is closed to new replies.