Linux system firewall configuration (1)

With the rapid expansion of bandwidth, information exchange on the Internet is increasing, and there is no doubt that the security of the Internet and operating system platform have gradually become a concern. Many network servers and workstations use Linux/UNIX platforms. Linux platform, as an operating system with high security and stability, has also been applied to commercial or civil network services.

With the rapid expansion of bandwidth, information exchange on the Internet is increasing, and there is no doubt that the security of the Internet and operating system platform have gradually become a concern. Many network servers and workstations use Linux/UNIX platforms. Linux platform, as an operating system with high security and stability, has also been applied to commercial or civil network services.

Although Linux is an operating system with a high security factor, as a dynamic and evolving operating system, it still inevitably has such problems. In addition, there are many Linux releases and frequent upgrades. There are still many defects in the market, and Linux applications without security patches are applied to network servers, linux users and managers have varying proficiency in actual operation and management experience, so there are still some security risks in the Linux platform in the Internet era. This also finds the "backdoors" that attack the Linux platform for immoral "hackers ". Therefore, how to improve the security factor of Linux and how to protect the Linux system is a very important task.

In the Windows platform world, many firewall and security tools are designed for Microsoft Windows. World-renowned software vendors such as Symantec and Mcafee have customized system firewalls, anti-virus software, and anti-hacker software for Windows systems. The so-called "firewall" refers to a method and technology that separates the Intranet from the Internet, that is, the firewall is actually an isolation technology. A firewall is an access control scale executed during communication between two networks. It allows people and data that you "agree" to access your network, at the same time, you will be "Denied" people and data, to prevent hackers from accessing your network to the maximum extent, and prevent illegal intruders from changing, copying, and destroying important information in the computer. Compared with Windows, the Linux operating system is somewhat different, because it has built-in firewall or related security software, in addition, experienced system administrators can open their own firewalls based on their actual conditions and upgrade the kernel to solve security problems. Therefore, there are rare firewall tool software dedicated to Linux. However, it is inconvenient to configure the firewall in Linux or the corresponding security settings. It seems that only the system administrator and Linux experts can complete the configuration, for some new Linux beginners, it is almost impossible to set the Linux Firewall and system security independently in Linux text mode.

Since many new users have a special liking for setting quick and convenient software tools in Windows, here we will introduce two firewall tools based on GUI in Linux.

One is the commercial version of Storm Firewall, which is a product of Stormix technology. Many system administrators may be familiar with this product.

The other is completely free Free Software Firestarter, which can be used in GNOME desktop environments. Both firewall software provides graphic characters of ipchains, eliminating the trouble of configuring the firewall in a rigid text environment, this allows users of the home network to easily complete firewall security settings on the Linux platform.

These two firewall software also have two satisfactory advantages. The first is that they are a very professional tool software that allows home users to fully configure the firewall and control the security of the entire network; the second is that they are very suitable for users who do not have much Linux operation experience and network system administrators who only need some simple functions to help them quickly build excellent firewall systems on their computers.

Well, to illustrate the problem, we will use a simple home network to test the two firewall tool software.