LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   Firewalls (https://www.linuxquestions.org/questions/linux-software-2/firewalls-306043/)

noteventime 03-25-2005 04:09 PM

Firewalls
 
Hello,
Is there any firewall for stopping outgoing connections like zonealarm does, for linux that is. And second would it be possible to "emulate" zonealarm in wine to stop outgoing connections. I want it to ask whenever a program tries to connect to the internet.

WRSpithead 03-25-2005 04:50 PM

Quote:

Is there any firewall for stopping outgoing connections like zonealarm does, for linux that is.
Look for it. Google for "[distro] firewall" where [distro] is your distrobution (e.g. red hat)

Quote:

would it be possible to "emulate" zonealarm in wine to stop outgoing connections.
Try it out.

benjithegreat98 03-25-2005 09:04 PM

I seriously doubt that running Zone Alarms is going to work under wine, but hey, I could be wrong.

The firewall that comes w/ linux is called iptables. It is really not capable (as far as I know) of blocking outgoing connections based on the program that is attempting to use the network. I will block outgoing ports. An example is that it can block outgoing connections to port 80. Any webbrowser that tries to connect to a webserver that is using the standard http port will be blocked from running.

The firewalls you can download should all be able to do this since all the firewalls for linux are basically configuation programs for iptables.

Hope that helps.

foo_bar_foo 03-25-2005 09:30 PM

generallty on linux (unlike windows) it is safe to allow all outgoing connections

what you can do if you are ubber paranoid from years of windows abuse is to
(using ip tables)
close all outgoing
allow all established and related outgoing so apps can negotiate ports
allow connections to your isp's dns server
allow ougoing to all web servers
allow outgoing to your specific smtp and pop3 or imap mail
allow any other outgoing services you use
log then drop everything else

then you can check logs to look for trojans or whatever

noteventime 03-26-2005 04:01 AM

Ok thanks, I'm partly a bit paranoid after using windows for WAAAAYYY to long. And partly im just intrested.


All times are GMT -5. The time now is 07:53 PM.