Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 149

15.4.1 Configuring the Firewall with YaST
IMPORTANT: Automatic Firewall Configuration
After the installation, YaST automatically starts a firewall on all configured in-
terfaces. If a server is configured and activated on the system, YaST can modify
the automatically-generated firewall configuration with the options Open Ports
on Selected Interface in Firewall or Open Ports on Firewall in the server configu-
ration modules. Some server module dialogs include a Firewall Details button
for activating additional services and ports. The YaST firewall configuration
module can be used to activate, deactivate, or reconfigure the firewall.
The YaST dialogs for the graphical configuration can be accessed from the YaST
Control Center. Select Security and Users > Firewall. The configuration is divided into
seven sections that can be accessed directly from the tree structure on the left side.
Start-Up
Set the start-up behavior in this dialog. In a default installation, SuSEfirewall2 is
started automatically. You can also start and stop the firewall here. To implement
your new settings in a running firewall, use Save Settings and Restart Firewall
Now.
Interfaces
All known network interfaces are listed here. To remove an interface from a zone,
select the interface, press Change, and choose No Zone Assigned. To add an interface
to a zone, select the interface, press Change and choose any of the available zones.
You may also create a special interface with your own settings by using Custom.
Allowed Services
You need this option to offer services from your system to a zone from which it is
protected. By default, the system is only protected from external zones. Explicitly
allow the services that should be available to external hosts. After selecting the
desired zone in Allowed Services for Selected Zone, activate the services from the
list.
Masquerading and Firewalls 137