IdentifiantMot de passe
Mot de passe oublié ?Je m'inscris ! (gratuit)

Installation et sécurisation d'une station Debian 3.0 stable


Installation et sécurisation d'une station Debian 3.0 stable

15/05/2004

[ Précédent ] [ Sommaire ] [ Suivant ] [ Télécharger ]

VI. INTEGRATION DE NETFILTER / IPTABLES
VI.a. Compilation du noyau
VI.b. Scripts d'initialisation


VI. INTEGRATION DE NETFILTER / IPTABLES


L'integration de NetFilter / Iptables a été realisee sur le noyau stable 2.4.18 et la version 1.2.6a d'Iptables presents dans les packages Debian.


VI.a. Compilation du noyau


Compilez votre noyau avec les options désirées et celles qui suivent : 

CONFIG_PACKET=y
CONFIG_NETFILTER=y
CONFIG_IP_NF_IPTABLES=y
CONFIG_IP_NF_MATCH_LIMIT=y
CONFIG_IP_NF_MATCH_MAC=y
CONFIG_IP_NF_MATCH_MULTIPORT=y
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_MANGLE=y
CONFIG_IP_NF_TARGET_LOG=y
Installez le nouveau noyau et rebootez.


VI.b. Scripts d'initialisation


Installez les scripts presents dans 'ANNEXE 7 - Paramètrage du firewall NetFilter' et donnez leurs les droits appropries.
Ajoutez le script init_iptables.sh pour qu'il soit pris en compte au boot du système 

update-rc.d init_iptables.sh defaults
Demarrez le firewall : 

/etc/init.d/init_iptables.sh start
[ Précédent ] [ Sommaire ] [ Suivant ] [ Télécharger ]
Copyright (c) 2003 Simon Castro, scastro [ at ] entreelibre.com.

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with the Invariant Sections being LIST THEIR TITLES, with the Front-Cover Texts being LIST, and with the Back-Cover Texts being LIST.
You must have received a copy of the license with this document and it should be présent in the fdl.txt file.
If you did not receive this file or if you don't think this fdl.txt license is correct, have a look on the official http://www.fsf.org/licenses/fdl.txt licence file.
Copyright (c) 2003 Simon Castro, scastro [ at ] entreelibre.com.

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with the Invariant Sections being LIST THEIR TITLES, with the Front-Cover Texts being LIST, and with the Back-Cover Texts being LIST.
You must have received a copy of the license with this document and it should be présent in the fdl.txt file.
If you did not receive this file or if you don't think this fdl.txt license is correct, have a look on the official http://www.fsf.org/licenses/fdl.txt licence file.