Phant0m + Enhanced ruleset(combo)??

Hi,

I'm not a firewall specialist, but I wonder if it's OK if I were to 'combine' phant0m's ruleset with the default enhanced ruleset, will that affect LnS security? Will it create any security holes?

Also if there was a 'double' ruleset, will that affect anything?.....thanks in advance =)

 

I'm no expert either but I'd guess that the point of having Phant0m's rule set is precisely not to combine - it's a package to be used as is or to tweak according to your personal needs. Cliemenole also has his own set of rules if you'd care to check them out.

 

Thanks for mentioning Cliemenole's ruleset bombing, I will keep that in mind =)

Anyway back to my question, does anyone else have an answer or there own opinion/thoughts?

ps, happy labor day =)

regards,
larry

 

Hi dpt.larry

The Phant0m rules set is a complete rules set as much as the other...

If you combine 2 rules set there will be duplicate rules and the position of the rules in the list will be illogic! Don't do that !

It's important to understand that the relative position of a rule in the list have an impact on all the rule set.

In all rules set based firewall, the rules are examined from the first of the list until a rule criteria matched the characteristics of the checked packet. If the criterias and the packet characteristics matched then that rule is apply to this packet.

There's a logic under each rules set and this must be respected for all new rules created with this rules set...

This is the same for the LnS ehanced rules set, Phant0m rules set and climenole rules set.