<div>
Just skip firehol and edit the /etc/sysconfig/iptables file directly to build your firewall. For example:<br />
<br />
-A INPUT -s &lt;source IP here&gt; -m state --state NEW -m tcp -p tcp --dport &lt;tcp port here&gt; -j ACCEPT<br />
<br />
Please don't take this the wrong way, but if you don't know linux basics like iptables, you have no business hosting phone services to other businesses. Voice is a mission critical application, you REALLY need to know what you're doing when providing a service like that. Imagine if there is an emergency and people can't dial 911 because you didn't configure something right...
</div>


<div>
Hi jar3817, I understand where you are coming from regarding Linux. A project like this is a team effort, not a one man job. I am a Cisco man myself I would consider myself an expert on VoIP, it's just linux isn't my platform. I am &nbsp;working on this with another person who is a Linux guru, however he is away for a few weeks and I don't want to wait for him to get back before I start internal testing, but then I don't want to make the server live without restricting access to it.<br />
<br />
Thanks for your suggestions guys I will give them a go!
</div>


<div>
Hi,<br />
&nbsp; I would suggest using Shorewall. It has a simple configuration syntax and is well supported by the community.
</div>


<div>
<div class="content wysiwyg-content">
Hi,<br />
<br />
I have been looking different firewalls for Linux Centos 5.5 and have decided that firehol will be the easiest way to implement iptables. <br />
However I need help configuring it. This is my senario...<br />
<br />
I have a (physical) server sitting in a datacenter, it has one Ethernet network connection (to the internet). The server will be running VoIP for around 20 businesses so I want to restrict access to the server based on IP addresses as well as ports, as all the customers will have static IP Addresses. <br />
So only authorized customers will be able to access the server and then only to authorized ports.<br />
<br />
How would I accomplish this using iptables and firehol?<br />
<br />
Thanks
</div>
</div>


Hi,

I have been looking different firewalls for Linux Centos 5.5 and have decided that firehol will be the easiest way to implement iptables. 
However I need help configuring it. This is my senario...

I have a (physical) server sitting in a datacenter, it has one Ethernet network connection (to the internet). The server will be running VoIP for around 20 businesses so I want to restrict access to the server based on IP addresses as well as ports, as all the customers will have static IP Addresses. 
So only authorized customers will be able to access the server and then only to authorized ports.

How would I accomplish this using iptables and firehol?

Thanks

Linux firehol/iptables on server

The Linux operating system, in all its flavors, has its own share of security flaws that allow intrusions, but there are various mechanisms by which these flaws can be removed, generally divided into two parts: authentication and access control. Authentication is responsible for ensuring that a user requesting access to the system is really the user with the account, while access control is responsible for controlling which resources each account has access to and what kind of access is permitted.

Linux Security

The variety of Linux distributions creates myriad issues relating to configuration and operations when computers are networked, not the least of which is the use of various network management applications, some of which are included with specific distributions, while others are standalone applications.