this post was submitted on 27 Sep 2024
82 points (97.7% liked)

Linux

48190 readers
985 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

Hey there folks,

I'm trying to figure out how to configure my UFW, and I'm just not sure where to start. What can I do to see the intetnet traffic from individual apps so I can know what I might want to block? This is just my personal computer and I'm a total newbie to configuring firewalls so I'm just not sure how to go about it. Most online guides seem to assume one already knows what they want to block but I don't even know how/where to monitor local traffic to figure out what I can/should consider blocking.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 75 points 1 month ago (16 children)

You've got it backwards. A firewall blocks everything, then you open up the ports you want to use. A standard config would allow everything going out, and block everything coming in (unless you initiated that connection, then it is allowed).

So the question you should be asking, is what services do you think you're going to be running on your desktop that you plan to allow anyone on the internet to get to?

[–] [email protected] -5 points 1 month ago (8 children)

Please stop giving bad advise. The local firewall is not the same as the public firewall and nat on the router. Your comment is incredibly misleading. You can have no Firewall and the services will not be available publicly

[–] [email protected] 1 points 1 month ago (1 children)

I fail to see why this is bad advice. Sure you could just disable the firewall on your computer on a local network. But that's under the assumption that you can trust everything on your local network. What if it's a laptop? Do you also trust any public networks you may connect to on the go? Having firewall both on the router and on your computer provides an additional layer of security, and I think that's good advice in general. You can for example set it up to only allow incoming connections when connected to your home network for example.

[–] [email protected] 1 points 1 month ago (1 children)

There is a difference between good practice and fear mongering. You aren't going to lose it all because you didn't turn on the Firewall.

[–] [email protected] 1 points 1 month ago

To be fair I haven't configured a firewall either on my laptop. But that's out of lazyness, not out of good practice. Good practice would be to have a firewall enabled. Just because something is unlikely to happen statistically doesn't mean it's bad practice to take steps to protect against it.

load more comments (6 replies)
load more comments (13 replies)