Guarddog

From MEPIS Documentation Wiki

Guarddog is the default firewall configuration utility in MEPIS. It provides a GUI for iptables, the firewall that comes with Linux kernel.

As the website states: "Guarddog is aimed at two groups of users. Novice to intermediate users who are not experts in TCP/IP networking and security, and those users who don't want the hastle of dealing with cryptic shell scripts and ipchains/iptables parameters."

Open the application by clicking KMenu --> Internet --> Security --> Guarddog. An online manual is available at the guarddog site.

Zones

Some users are confused by two "Zones" found under the Protocols tab. These "Zones" determine direction, or being client or server. The Internet Zone allows connections to servers and services that are on the Internet/Network. The Local Zone allows connections to servers and services that are on the local machine (for example sshd server allowing remote logins to your local machine).

Setting up a custom zone

If for example you need a "Local Network" zone with different firewall permissions you can do the following:

1. click "New Zone" in Zone tab
2. edit name as "Local Network" and set up the address or the address range (using a network mask) of the machine(s) that will be part of that zone
3. check the "Local" checkbox in "Connection" section
4. now you can go to the "Protocol" tab and select the checkboxes in "Local" for protocols that should be accessible from the new zone and in "Local Network" the protocols that should be accessible from your machine.

Adding a new custom protocol

1. Go to "Advanced" tab
2. Click "New Protocol" set up a custom name and specify the type: TCP or UDP and enter the port number or range
3. You'll find the new protocol in "Protocol" tab, in the "User Defined" section of each of the Network Zones.

See also: Firestarter

---

[es:Guarddog]]