Best linux firewall for home web server

What would be the best way to protect a Linux PC on home DSL?

[jnuneznyc]

I want to run a home web server and I was wondering if iptables and just opening ports 80 and 22 is enough? I really wouldn't want to get a hardware firewall.

I have been able to keep my Linux box patched with the latest updates. (Thanks Gentoo)

OK I'll fess up... I will also play UT 2004 at nights.

Thanks,
JNunezNYC

[MattyMoose]

Yup, that should be enough...

If you'll be running an https site as well, you'll want to open port 443.

If you're going to run anything else on it (incoming mail/ftp etc), you'll want to open up those respective ports as well.

You could set it up so that you restrict the outgoing ports as well, but that can get kinda tedious, since many different applications use many different ports.

-MM

[jnuneznyc]

Thanks MM!

I won't be running any mail or https. It will just be a simple web server. Maybe a few php scripts.

Thanks Again,
JNunezNYC

[MattyMoose]

Right on!

Good Luck, and if you need any more help, please just ask!

:)

MM

[bufferzone]

It’s quit enough and if you are up to the challenge you can use Squid on top of Netfilter (IPTabels) and get a http application Proxy firewall giving you superb security