How test firewall on raspberry pi???

[VladyslavVolskyi]

Hi Guys,

I want to achieve difficult firewall on Rpi, which will filter trafic from 10 different machines->eth1->eth0->Internet.

But before using it in my project, a want to test how efficient(productive) this firewall is. So i need to create rules, which will filter all trafic, but i don't know how can i test, which ports/services/packets should i filter. Could i tell me some examples, which i can use e.g filter http packets.

I already have some simple rules, but can't think up more difficult rulles, filterin internet trafic.
Help please!!!

[DougieLawson]

sudo apt install ufw gufw

Use gufw to control your uncomplicated filewall (ufw). Use ufw to write the iptables and ip6tables rules for you.

[allfox]

To learn the iptables: http://www.iptables.info/en/iptables-contents.html

[DougieLawson]

To learn the iptables: http://www.iptables.info/en/iptables-contents.html

... and enjoy a new level of suffering which is hidden from you with ufw.

[VladyslavVolskyi]

But could You suggest me which rules, to your mind, i should make, which trafic accept / drop.

[DougieLawson]

What services are you running? Only open the ports (22, 80, 443) for things you need, everything else is blocked.

I also run fail2ban as intrusion detection system, that writes dynamic iptables rules based on what it detects in various logs.