Mandrake 9.1 setup Firewall, can't access the net

[Francois Bourgault]

All,
I'm new to linux. I just installed version 9.1 But when I setup the firewall, I can't access the internet. Only when I check the box:
"Everything (no firewall)" that I can access the internet. If I uncheck the box, I lose access. Any idea on what I may be missing? FYI - DrakSec security level is: standard. Not sure if it has anything to do.
Thanks,
Francois.

[George Brown]

I believe shorewall is installed as the firewall package (it's iptables-made-easy) by default with mandrake 9.1, check out the shorewall website for more info. There's a great mailing list for shorewall too, with a very fast turnaround on shorewall problems.
To get things set up the way you want them you should get acquainted with the shorewall documentation first. You will need to edit some of the shorewall configuration files to change the setup.
I'm not sure what version is installed with mandrake 9.1, open a terminal session and type:
rpm -qa|grep shorewall
to find out. When you know the version that's installed you can read the appropriate section of the website.
I hope that helps.

[Francois Bourgault]

Tnxs,
I'll check out shorewall docum. In the mean time, I did some research and I downloaded/installed guarddog. If I run guarddog, will it conflict with shorewall setup or should I uninstall shorewall so there's no conflict when I start linux.
Francois.

[George Brown]

You wouldn't need to uninstall shorewall, just change which services are started at boot time to make sure that shorewall isn't started by default. Then you can run guarddog to configure your firewall. I had a quick look at guarddog and it looks as though guarddog is a GUI to manage the iptables, so it's doing ostensibly the same as shorewall (except it does it via X windows).
The easy way to disable shorewall at boot time is to type the following at the root user's command prompt:
chkconfig shorewall off
[ November 18, 2003: Message edited by: George Brown ]