LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Ubuntu
User Name
Password
Ubuntu This forum is for the discussion of Ubuntu Linux.

Notices


Reply
  Search this Thread
Old 10-15-2012, 04:11 PM   #1
Lola Kews
Member
 
Registered: May 2004
Posts: 549

Rep: Reputation: 38
Where is the "FireWall"in Ubuntu 12.04 LTS ?


Hello to all. I have now become extremely security concience because of recent problems that led me to go to Ubuntu 12.04! I wasn't very security concious before!!

I can't find info on whether or not it has a FireWall, if so how to find it or set it up?

Any and all instructions on securing my new OP system would be very much appreciated.
 
Old 10-15-2012, 05:03 PM   #2
archShade
Member
 
Registered: Mar 2006
Location: Delft NL
Distribution: Debian; Slackware; windows 7
Posts: 218

Rep: Reputation: 53
Linux has the netfilter system (built into the kernal) which acts as a firewall (as well as other things). These are configured using IP tables. Unfortunatley IP tables can be quite complex (they also offer a lot of power and configuaration options). Luckily Ubuntu comes with a package called ufw (uncomplicated firewall).

Ufw is a simplified interface for configuring iptable while still offers plenty of power, this application is still driven on the command line but it's not difficult to use if you are happy using a terminal. Ufw should be installed by defualt if not a quick "sudo apt-get install ufw" should suffice (or install though software centre).

If you not so happy on the command line there are other GUI tools you can use to configure netfilter wither by controlling ufw or iptables directly. I don't have any experiance of such applications but a quick google suggests that Gufw or firestarter are good easy to use GUIs. One note I don't beleive firestarter to be currently maintained so bugs may go unpatched. Gufw should be availible in software centre.

HTH
 
Old 10-16-2012, 03:01 PM   #3
Lola Kews
Member
 
Registered: May 2004
Posts: 549

Original Poster
Rep: Reputation: 38
Unhappy

Hi archShade thanks for answering. I will print out your reply and see what I can come up with.
It is scaring the heck out of me that there was no mention of a firewall in loading 12.04, so if I can't get this resolved quick I fear I will be right back in the same boat (so to speak) that I was before, getting "hacked" to death!! That's something I will not put up with and no one should expect me to.

Currently I can't even get the system to store passwords, even though I have exercised this option in "Preferences", that's another thing that really gives me concern about Ubuntu, maybe they are giving up on there goals.










Quote:
Originally Posted by archShade View Post
Linux has the netfilter system (built into the kernal) which acts as a firewall (as well as other things). These are configured using IP tables. Unfortunatley IP tables can be quite complex (they also offer a lot of power and configuaration options). Luckily Ubuntu comes with a package called ufw (uncomplicated firewall).

Ufw is a simplified interface for configuring iptable while still offers plenty of power, this application is still driven on the command line but it's not difficult to use if you are happy using a terminal. Ufw should be installed by defualt if not a quick "sudo apt-get install ufw" should suffice (or install though software centre).

If you not so happy on the command line there are other GUI tools you can use to configure netfilter wither by controlling ufw or iptables directly. I don't have any experiance of such applications but a quick google suggests that Gufw or firestarter are good easy to use GUIs. One note I don't beleive firestarter to be currently maintained so bugs may go unpatched. Gufw should be availible in software centre.

HTH
 
Old 10-16-2012, 03:05 PM   #4
snowday
Senior Member
 
Registered: Feb 2009
Posts: 4,667

Rep: Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411
I recommend you read this very informative introduction to security in Ubuntu (including firewalls): http://ubuntuforums.org/showthread.php?t=510812

I am very confused by your statement that security is your #1 priority, and yet you find Ubuntu lacking because it asks for your password?
 
Old 10-16-2012, 04:11 PM   #5
Lola Kews
Member
 
Registered: May 2004
Posts: 549

Original Poster
Rep: Reputation: 38
Quote:
Originally Posted by snowpine View Post
I recommend you read this very informative introduction to security in Ubuntu (including firewalls): http://ubuntuforums.org/showthread.php?t=510812

I am very confused by your statement that security is your #1 priority, and yet you find Ubuntu lacking because it asks for your password?
I don't know who you are, but I never made the statement you mention, you seem to be mixing up words to suit yourself and make me sound like an idiot!!

Security is my #1 priority, even though I am not a "Guru" I know enough to see you are atempting to mislead others on the things I am saying, by changing my words to suit your position!!!! SO, If you can't help the problem, get the HELL out of the conversation.
 
Old 10-16-2012, 04:51 PM   #6
snowday
Senior Member
 
Registered: Feb 2009
Posts: 4,667

Rep: Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411Reputation: 1411
Be that as it may... Do you have any questions about the security concepts explained in the link I posted?

http://ubuntuforums.org/showthread.php?t=510812

Last edited by snowday; 10-16-2012 at 05:00 PM.
 
Old 10-16-2012, 04:55 PM   #7
JaseP
Senior Member
 
Registered: Jun 2002
Location: Eastern PA, USA
Distribution: K/Ubuntu 18.04-14.04, Scientific Linux 6.3-6.4, Android-x86, Pretty much all distros at one point...
Posts: 1,802

Rep: Reputation: 157Reputation: 157
The link he posted is actually a good one and worth the read,...

I would also mention a few things...

Disable remote gui logins for everyone. Either disable ssh, or secure it according to that article. Choose a password that has 8+ characters (more is better) and have a look here for a humorous take on this;
http://xkcd.com/936/

In your browser, use things like NoScript (helps contain javascript malware). Chrome/Chromium tends to sandbox web sessions better than other browsers (but was, ironically, the first one hacked in a fairly recent hacking contest). Avoid using Adobe flash, if you can help it.

Try to logout of your user account between browsing sessions, especially when browsing unfamiliar sites (java/javascript malware has the potential to temporarily "infect" your account). Make sure your Desktop Environment is set to give you a fresh session by default (rather than trying to preserve running apps, etc.). Make sure that your browser is connected securely when inputting any personal information (using https,... you'll see the little lock symbol in the status bar).

If you use Google services (gmail, Google+, have an Android phone, etc.), make sure to activate two step authentication. If you have an Android device,... there's a nice app from Google that gives you rotating pin codes to authenticate apps and devices that connect to Google's services... You just have to authenticate that device first.

Make sure your screensaver (and login) requires your password. Never re-use your user account password, nor any derivatives of it, with on-line accounts. Never re-use passwords on any online accounts connected to a credit card or bank account. Never use an open WiFi connection (one without WPA2 encryption or better) to transact anything that you wouldn't announce from the top of a building. And try to avoid using a static IP from your ISP, unless you have to do this for some business related purpose.

Last edited by JaseP; 10-16-2012 at 04:57 PM.
 
Old 10-16-2012, 05:10 PM   #8
archShade
Member
 
Registered: Mar 2006
Location: Delft NL
Distribution: Debian; Slackware; windows 7
Posts: 218

Rep: Reputation: 53
You started cross posting (asking for help on another a thread). Snowpine was trying to help and suggested a link which has a lot of infomation. Concerning firewalls you should not expect any signs that a firewall is loaded (I'm not sure if you where refering to during the installation or during boot up). Like I said the fundermentals of Linux firewalls are controlled by the Linux kernal so there is nothing to install. The basic interface is the IP tables (again is part of the basic sub-sytem), but the applications (ufw, and gufw) I listed provide a simpler to use interface.

I'm guessing you have had a bad experiance with working with windows. More important than having firewall is making sure your system has no unessecery web facing services. SSH is the the most often targetted vulnrabillity. It's important to keep up to date packages.

Also no matter how you think you are being represented people will be more willing to help if your civil.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Ubuntu 12.04 LTS "Precise Pangolin" Released LXer Syndicated Linux News 0 04-28-2012 04:10 AM
"BOOTMGR not found" error after installing Ubuntu 10.4 LTS abhi1242 Linux - Laptop and Netbook 1 09-26-2011 06:15 AM
"how to capture automatic screen shots on ubuntu 10.04 LTS & fedora 10" tasol Linux - Desktop 2 03-22-2011 12:12 AM
LXer: Is the Release of Ubuntu 10.04 LTS "Lucid Lynx" Delayed? LXer Syndicated Linux News 0 04-29-2010 09:30 PM
LXer: Much Awaited And Fully Loaded Ubuntu 10.04 LTS "Lucid Lynx" Released! LXer Syndicated Linux News 0 04-29-2010 08:30 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Ubuntu

All times are GMT -5. The time now is 03:13 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration