[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Installing a firewall



Astaro do a GUI managed firewall for the Raq3. We have bought a Raq3 especially for this purpose. The software looks and sounds excellent...except for one thing....The main instructions are in German. They do provide a basic set up guide in English and the software is in English. However, if you have no experience setting up Firewalls, there are no clues in English.

They have promised to rectify this and I have even asked where I can get formal training on Astaro but I still have not managed to set the thing up.

The sales guy is Ernst Kelting ekelting@xxxxxxxxxx and I met him at the Cobalt Partners conference a few months ago. If you can get it set up, this looks like a fabulous product.

Jason

----- Original Message -----
From: Dan Helzer <danh@xxxxxxxxxxx>
 I'm a Cobalt neophyte, so this may seem like a very simple question. How
do
 you install a firewall on a Cobalt RaQ3? I read somewhere on the list that
a
 RaQ3 has a firewall feature, but I can't find it. Any suggestions will be
 greatly appreciated.


Of many types and aspects of firewalls, something that is more relevant for
Cobalt server would be ipchains.  IPCHAINS basically looks at individual ip
packets and decides what to do with them.  If I remember correctly, RaQ3
probably does not come ipchains installed.  You might want to get a rpm from
RedHat (or .pkg if someone trustworthy has put one together) and install it
first.  Then, it's all a matter of defining the ipchains "rules" -- you see,
you make the rules by which ipchains will examine ip packets.  As you
probably surmise already, setting up these rules is the hardest part.  One
word of precaution:  YOU CAN EASILY LOCK YOURSELF OUT OF THE BOX while you
are creating these ipchains rules.  So, you probably want to have physical
access to your machine just in case the machine locks you out and you need
to get in via the console.  There are some ipchains rule creation tools to
get you started.

James Kim

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users

--
 ---------------------------------------------
Webmaster
       Netergy.com Limited
       Studio 1B, 101 Farm Lane, London SW6 1QJ
       T: 020 7610 1010 - F: 020 7610 1551
       http://www.netergy.com
       http://www.anynames.com
 ---------------------------------------------

 IMPORTANT LEGAL NOTICE:
This e-mail is strictly confidential and is intended solely for the person or organisation to whom it is addressed. It may contain privileged and confidential information and if you are not the intended recipient, you must not copy, distribute or take any action in reliance on it. If you have received this communication in error, please advise us by e-mail and delete the file from your system.

If you contact us by e-mail, we will store your name and address to facilitate communications.