gShield Installation Notes -------------------------- * Netfilter/iptables gShield assumes you have a properly working and configured netfilter/iptables setup. I personally recommend simply compiling ALL netfilter options DIRECTLY into the kernel. gShield does not make use of non-standard options to netfilter (such as those in the patch-o-matic directory of the iptables source). netfilter and iptables documentation can be found at http://netfilter.filewatcher.org. * Installing the script The default installation is as follows: everything ---> /etc/firewall Oddly enough, placing the tarball in /etc and untar'ing it there will dump everything into /etc/firewall/ ** NOTE ** DO NOT attempt to run configure this script remotely! DO NOT run the thing remotely! I recommend installing/configuring the first time locally in case something horrible happens. * NEXT * Open a terminal. Get out that favorite editor of yours. Edit gShield.conf -- it's commented. * NEXT * Read the README. * NEXT * Run the script (/etc/firewall/gShield.rc). I suggest linking this, or setting it up as an automatic process. Two examples on how to do this. PPP -- under Debian, there's a nice directory -> /etc/ppp/ip-up.d/ Make a link from the firewall: ln -s /etc/firewall/gShield.rc /etc/ppp/ip-up.d/gShield.rc DHCP -- from my config file for dhcpcd: OPTIONS='-d -c /etc/firewall/gShield.rc' * That's it *