Re: Is Guarddog still the easiest and best firewall GUI program for Linux?

Date	2011-12-04 02:34 +0100
From	David Brown <david.brown@removethis.hesbynett.no>
Newsgroups	comp.os.linux.x, comp.os.linux.networking, comp.os.linux.security, comp.os.linux.setup
Subject	Re: Is Guarddog still the easiest and best firewall GUI program for Linux?
References	<ePCdnRb0o4ZUokTTnZ2dnUVZ_qSdnZ2d@earthlink.com> <slrnjdihi9.2j6.notbob@nbleet.hcc.net> <xZednYDoxrCyQ0TTnZ2dnUVZ_qydnZ2d@earthlink.com> <8cadnaw2wfZUm0fTnZ2dnUVZ7rmdnZ2d@lyse.net> <vtidnaWYtN6jyEfTnZ2dnUVZ_o6dnZ2d@earthlink.com>
Message-ID	<L6SdnbzliI3dU0fTnZ2dnUVZ8mWdnZ2d@lyse.net> (permalink)

Cross-posted to 4 groups.

Show all headers | View raw

On 03/12/11 17:58, Ant wrote:
> On 12/3/2011 3:23 AM PT, David Brown typed:
>
>>> Ah, I want GUI because it is easier to understand what's going on. I use
>>> similiar products like Kerio Personal Firewall v2.1.4, Outpost Firewall
>>> 2009, Conseal PC Firewall, Norton, etc. :)
>>
>> These aren't similar products. Windows "firewalls" operate in a
>> completely different way from Linux firewalls. Linux firewalls are
>> concerned about what comes into, goes out of, or passes through your
>> machine at a lower level. Mostly you allow or deny packets depending on
>> their source (which interface they come in on, or their IP address),
>> their destination, and their protocol and port (such as port 80 tcp for
>> http traffic). There are, of course, many other possibilities and
>> features of iptables firewalls.
>>
>> For typical home use, you only need a very simple setup - everything
>> outgoing is allowed, everything incoming is blocked unless it is in
>> answer to outgoing connections. You may also want to open particular
>> incoming ports, for applications such as bittorrent.
> ...
>
> Well, I still want to get prompted what goes in and out. Then, I can
> tell it to allow/deny, learn the IP addresses, ports, dircetions, etc. I
> don't allow everything to go out either since I hate programs that phone
> home.

You are using Linux - programs for Linux are mostly either open source 
(and very rarely do anything nasty - it would quickly be spotted), or 
they are serious professional programs (which also don't do anything 
nasty - at least, not unless you have made illegal copies).  Stop 
thinking in the Windows world.

Back to comp.os.linux.security | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

csiph-web