Teach me about firewalls

What is the one most important thing for a newbie to know about rule based firewalls?

I'm talking about specific knowledge,/facts not general principles like "deny everything untill you can figure out if it is necessary"

Personally I think it's the concept of server and client (ephemeral) ports .

I mean most people quickly figure out that TCP 80 is HTTP, but they have no clue how to configure the rule. Is port 80 remote or local? If remote, what port should be local?

 

FIREWALL FAQ'S: http://www.robertgraham.com/pubs/firewall-seen.html


FIREWALL GUIDE: http://www.firewallguide.com/


FIREWALL INFO-GREAT: http://www.howstuffworks.com/firewall.htm

 

man you starting off hard core for a newb rule based thats like hard

even to this day i cant fully config one of those manuely do rule based fire walls to much work

zap newby frindly pet the zap thank the zap love the zap lol

oh zap is zone alarm pro fire wall its perty nice for newbys only a little minor tutorial and some very very lite reading.

 

wait one darn tutin minut you cant be a newb and ask newby qustions if your a JayK Junior Member?

with only 2 posts

newby inposter get himmmmmmm newb alert imposter imposter security expert masking him self as a newb tar and feather_------_--_-_-_--_----_--___--_-_-

_---_-_- come back here _-_--_--_

 

he he he opps my mistake Posts: 75 lol ok maybe you are a jr newb lol but ill be watching you if i hear yopu mention hard ware fire wall or some long puter word ill know lol

 

JayK,

Did you have a look at those threads:

System Wide Rules
http://www.wilderssecurity.com/showthread.php?t=4413

Global Permit/Block Rules
http://www.wilderssecurity.com/showthread.php?t=4419

Application Rules
http://www.wilderssecurity.com/showthread.php?t=4423

Final Block Rules
http://www.wilderssecurity.com/showthread.php?t=4426

 

Hmm. I know you are joking, but assuming you are serious...

1) I think my post was somewhat misintrepreted, due to the poor subject line. Actually I understand TCP/ICP and/or firewall rules at a beginner level but I was wondering if you wanted to teach someone how to use a rule based firewall, what are the miniumum amount of things they need to know.

No offence, but pointing to a url with a 3-4 page jargon filled (to most people anyway) page wont work for most people

2) There's no rule to say that newbies to Wilderssecurity cannot be experts. After all Wilderssecurity is not the centre of the security world. It provides a good place for beginners to learn from others (mostly people who are non-programmers but have slowly learnt bits and pieces of common security tips and understand threats to security on a high level)

In fact, except for a few moderators etc. it would be laugable to call anyone here a "Security expert". Knowing how to use anti-virus, configure simple firewall rules , an expert one does not make.


3) There are a lot of senior members who might be very knowledgable about security products by the virtue of trying almost everything, but they actually understand very little about the fundamental security principles and what the products they use really do, or how they do it.

I fall into this category (in terms of knowledge not posts). To my non-geek friends, they are impressed when they know I use a firewall,I can talk about ports,tcp/icp ,cookies,SSL etc in general, but I'm very aware of how little I *actually* know and wouldnt pass myself off as an expert .

This is not an attack on wildersecurity of course. But I wouldnt judge anyone has a "newbie" or "expert" solely based on the number of posts here.

 

Hi JayK,

I'm really sorry that you felt hurt !!!
Sorry !!!
It was not my intention that you felt that way.

I myself am not the kind of person to call myself a "security expert".

The "problem" with rule-based firewalls is that you indeed need a bit to learn about them.
I thought that the links, which I posted, and the other posted links could help you in some way.
Maybe I was indeed wrong here.

Did you have a look at this link at the Wilders-site:
http://www.wilders.org/firewalls.htm


Maybe (just only a suggestion) it might be better to start all over again so we could leave this thread behind us?
Only a suggestion: why not try to start a new thread with some specific questions about some rules?
I give just only an idea: what kind of rule(s) would be the best for my email-program X with my firewall Y to be as secure as possible?

 

what seriouse about what no jokeing lol

how can you mistaken that for seriosnesss

look like some one want a hugy

come here come closer yup that it hugggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg

there hope that make you feel better

 

Hey guys,

Let's have peace, OK?