Ubuntu Firewall Project Contents Introduction ................................................................................................................................................................................................................... 4 Prerequisites .................................................................................................................................................................................................................. 7 Firewall Management Machine ..................................................................................................................................................................................... 7 Install Ubuntu Jaunty 9.04 Desktop ........................................................................................................................................................................... 7 Configuration ............................................................................................................................................................................................................. 9 Login ....................................................................................................................................................................................................................... 9 Update Manager .................................................................................................................................................................................................... 9 Install VMware‐tools ............................................................................................................................................................................................ 10 Set Static IP Address ............................................................................................................................................................................................. 11 Install Webmin ......................................................................................................................................................................................................... 12 Download Webmin .............................................................................................................................................................................................. 12 Webmin Security Setup ....................................................................................................................................................................................... 13 Install FWBuilder 3.07 .............................................................................................................................................................................................. 14 Download FWBuilder 3.07 ................................................................................................................................................................................... 14 Install FWBuilder .................................................................................................................................................................................................. 15 Configure Host file ................................................................................................................................................................................................... 15 Finish Firewall server before continuing .................................................................................................................................................................. 16 Firewall Machine .......................................................................................................................................................................................................... 16 Install Ubuntu Jaunty 9.04 Server ............................................................................................................................................................................ 16 Configuration ........................................................................................................................................................................................................... 20 Login ..................................................................................................................................................................................................................... 20 Page 1 of 93 Ubuntu Firewall Project v1.0 (2010.02.28) Author: Brandt Winchell Update Manager .................................................................................................................................................................................................. 20 Install VMware‐tools ............................................................................................................................................................................................ 20 Set Static IP Addresses (Temporary) .................................................................................................................................................................... 22 Install wget ........................................................................................................................................................................................................... 22 Install IP Tables .................................................................................................................................................................................................... 22 Install SSH ............................................................................................................................................................................................................. 22 Install Webmin ......................................................................................................................................................................................................... 23 Download Webmin .............................................................................................................................................................................................. 23 Webmin Security Setup ....................................................................................................................................................................................... 24 Set Static IP Address (Permanent) ........................................................................................................................................................................... 25 FWBuilder Configuration ............................................................................................................................................................................................. 26 Firewall machine ...................................................................................................................................................................................................... 26 FWmanagement machine ........................................................................................................................................................................................ 28 Configure your Policy ........................................................................................................................................................................................... 29 Configure FWBuilder log prefix and options ........................................................................................................................................................ 35 Save and Compile Rules ....................................................................................................................................................................................... 35 Deploy the Firewall Rules ............................................................................................................................................................................................. 36 Test SSH access ........................................................................................................................................................................................................ 36 Create test Policy Rule ............................................................................................................................................................................................. 36 Configure Logging ........................................................................................................................................................................................................ 39 Install MySQL ........................................................................................................................................................................................................... 39 Configure MySQL ..................................................................................................................................................................................................... 40 Install Rsyslog ........................................................................................................................................................................................................... 58