free web hosting | free hosting | Business Hosting Services | Free Website Submission | shopping cart | php hosting
 
Tweaking the Firewall
 
Building a Linux Router - Firewall

 

I have found Freesco's default firewall settings to be secure. Some users may want to make some minor changes.

I ran into a problem when trying to receive files with ICQ. Both my ICQ buddy and I were behind firewalls and the file transfers would not start. ICQ needs a block of 10 for so ip ports opened for file tranfers. ICQ must also be configured to use these assigned ports. I'm sure many other programs also have similar requirements for tcp or udp ports.

Freesco uses the port forwarding command 'ipautofw'

ipautofw -A -r tcp (1st port) (last port) -h (ICQ host ip address)

There is a file called RC_USER on the Freesco floppy disk. Each block of ports is defined by adding a command line between the follwing statements:

if [ "$1" = firewall ]; then

and

exit; fi

For example

ipautofw -A -r tcp 11500 11510 -h 192.168.0.3

udp ports can be entered instead of tcp.

11500 - 11510 is an arbitrary block of numbers that I thought up. IP 192.168.0.3 is the current address of my XP Pro Box. A different block of ports or a different IP will require seperate statement line.

Although Freesco is setup with a DHCP server for the internal network, I have not seen the assigned IP addresses change on the networked computers. I know there's a big leap of faith here so you may want to set up the internal network to static IP addresses.