Exercise 52: Connecticut Water

To configure the firewall as needed by the customer, follow these steps:

1.	Start YaST as the root user.
2.	Choose Software, Install and Remove Software and verify that iptables is installed by searching for it. If it is not installed, install it.
3.	Open a terminal window. Type iptables -t filter -L. This will show the currently configured rules for the filter table (of which there should be none).
4.	Create a firewall that drops all incoming ICMP packets by typing iptables -t filter -A INPUT -s 0/0 -p icmp -j DROP. Configure the firewall to drop web server traffic by typing iptables -t filter -A INPUT -s 0/0 -p tcp - dport 80 -j DROP.
5.	Enable the NAT routing by typing iptables -t nat -F.
6.	Type iptables -t filter -L. This should show that the new rules are now in place.
7.	Exit the terminal window and leave the customer's site.

NOTE

After configuring the system, it is always recommended that you test it and verify that it is working properly. Although the practicum exams are only interested in your configuration, and not your ability to test, you should test as time allows to assure yourself that you have completed the process properly.