Posts Tagged ‘packet filter’

Shorewall Installation

Wednesday, January 6th, 2010

Hei all, continuing from last post about Shorewall now I’ll try to tell you all about how to install it. This installation consist of 2 installation, the first is Shorewall it self. Then the second is Webmin (Web GUI) for easily configuration purpose. In this case, I used Ubuntu Linux 9.10 Operating System. Before start the installation, you must set your apt source list to be enable connect to valid Ubuntu repository.

First step is you should go to your console terminal, then change to super user privileges.

meteor@galaxy:~$ sudo bash
[sudo] password for meteor:
root@galaxy:~#

Then run this command “apt-get install shorewall-common shorewall-shell” from your terminal, and please wait until all process finished

 root@galaxy:~# apt-get install shorewall-common shorewall-shell
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
shorewall-doc
The following NEW packages will be installed:
shorewall-common shorewall-shell
0 upgraded, 2 newly installed, 0 to remove and 181 not upgraded.
Need to get 221kB/307kB of archives.
After this operation, 1.610kB of additional disk space will be used.
Get:1 http://kambing.ui.ac.id karmic/main shorewall-common 4.2.10-1 [221kB]
Fetched 221kB in 5s (40,6kB/s)
Prakonfigurasi paket ...
Memilih paket shorewall-common yang sebelumnya tidak dipilih.
(Sedang membaca basis data ...130042 berkas dan direktori telah terpasang.)
Sedang membuka paket shorewall-common (dari .../shorewall-common_4.2.10-1_all.deb) ...
Memilih paket shorewall-shell yang sebelumnya tidak dipilih.
Sedang membuka paket shorewall-shell (dari .../shorewall-shell_4.2.10-1_all.deb) ...
Processing triggers for sreadahead ...
Processing triggers for man-db ...
Sedang menyetel shorewall-common (4.2.10-1) ...

Sedang menyetel shorewall-shell (4.2.10-1) ...
root@galaxy:~#

Until this condition you’ve successfully install Shorewall on your machine. And now let’s install the Webmin as Configuration GUI tools. You should download its installer packet from Webmin official site and choose the suitable package with your system. In this case I use package that suitable for Ubuntu. After you download that file, just double-click that file and the installer is automatic run. Images below is screenshot the installation process.

#1 – Package Installer that already downloaded

#2 – Installation Confirmation

#3 – Administrative Grant Rights to Install Software

#4 – Installation on progress 1

#5 – Installation on progress 2 (Terminal view expanded)

#6 – Installation finished

After finish that process, you can test Webmin installation by opening it from your browser (ie, firefox) using this address https://localhost:10000/ If it’s installed properly, this screen below should displayed like this.

After that all installation process steps already done, and you can configure your Shorewall from this Webmin GUI to meet your requirements.

Note: login using your local username and password.

Shorewall – Shoreline Firewall

Saturday, November 28th, 2009

Last week, i’ve tried to install a software based firewall on Ubuntu. It used to simulated network segmentation for access and security. For this security simulation test, I’ve chosed a software based firewall called Shorewall and use virtual workstation using VirtualBox. Shorewall was installed on my laptop as VirtualBox host PC. And for client and server, I used 2 virtual Windows XP Operating System.

The Shoreline Firewall, more commonly known as “Shorewall”, is high-level tool for configuring Netfilter (the packet filter facility builtinto the 2.4 and later Linux kernels). You describe your firewall/gateway requirements using entries in a set of configuration files. Shorewall reads those configuration files and with the help of the iptables, iptables-restore, ip and tc utilities, Shorewall configures Netfilter and the Linux networking subsystem to match your requirements. Shorewall can be used on a dedicated firewall system, a multi-function gateway/router/server or on a standalone GNU/Linux system. Shorewall does not use Netfilter’s ipchains compatibility mode and can thus take advantage of Netfilter’s connection state tracking capabilities.

Shorewall use zone concept firewall, it’s means that shorewall views the network where it is running as being composed of a set of zones. Shorewall has a default policy that all defined rules should based on it. That default policy ruled out all of zone that defined before. All other main feature that included on Shorewall is:

  • Uses Netfilter’s connection tracking facilities for stateful packet filtering.
  • Can be used in a wide range of router/firewall/gateway applications.
  • Supports centralized firewall administration
  • Flexible address management/routing support
  • and much more as listed on the official site

And maybe i’ll post my test result for this Shorewall Configuration that separate 2 network segment. cekidot aja yah… :D