Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
I've used Linux (MDK 9.1 at the moment) for quite a while alongside with MS. The more I use it the more I start liking the progs. I have read a lot of info about how to install firewall, iptables etc but what I'm asking myself now is how important a firewall actually is. I'm online always, file sharing (k-lite, xmule, ftp-server, ssh-server), which also exposes me to viruses. So I guess I'm asking for your opinion or info on the need of a firewall and virus protection (could spread it to friends using other more vulnerable systems).
Well it seems as if a firewall is important. I'm not sure I have the time at the moment (studies...) to build up a netfilter code at the momnent (I would like to do it though). Plus I'm a bit scared of locking my computer, getting more probs than benefits (not saying a GUI wouldn't do that aswell).
So I guess I'm gonna go for a GUI. I've heard a lot about Guarddog and the documentation seems rather good, but does it work on windowmaker or just on KDE? I've heard about some others such as smoothwall and Astaro but they seem to take over the computer changing it into a router.
Hmmm Guarddog would require some of the KDE libs for display.
It doesn't take over as its a GUI for setting the computers filters etc. Its pretty hot on the protocols so it locks lots of things down. Took me ages to get the real player working
As for anti-virus programs, I don't have any. There are a few about but Linux doesn't suffer that much from them. I been running Linux about 6 years and never seen a virus.
I'm using windowmaker but I have KDE installed on the puter. So it should work, or?
I guess the only reason to have a virusprogram is to recognize if a file is infected so that I don't spread it to a MS user. On the other hand they can have it!
Cool! Then I got some installations ahead of me! But there's some serious partying and bar-work attending to first. Remembering what happened last time I did repartitioning/installation at 4am after partying; perhaps I should wait untill tomorrow...
Distribution: Linux & Everything else on VirtualBox
Posts: 144
Rep:
Since you are using Mandrake just start the mandrake control panel click on security then on firewall. If the shorewall packages are not installed it will install them. You could even do it drunk!
Wow, I'm surprised how easy it was configuring guarddog. Rpm -ivh, start, click, click, done? Forgot the DNS access, click, et voilą!
I guess it's too late switching to smoothwall now. But I'll try it in a few weeks when the Mandrake 9.2 is released. Is it somewhat like guarddog, i.e. easy but still ~safe?
iptables -A OUTPUT -p ALL -s 127.0.0.1 -j ACCEPT
iptables -A OUTPUT -p ALL -o eth0 -j ACCEPT
this just makes sure that nobody makes new connections to your computer via the state-matching rule. it's a really basic firewall that doesn't watch for certain funny packets and i'm sure the guarddog firewall is better out of the box, but a real understanding of iptables is a very useful tool to possess.
all you need to do is put this into a script where mandrake 9.1 will load it from on boot (i don't know where it is...).
I definetely want to learn how to set up an iptables firewall. It's just my *blody* finals right now so I guess guarddog does the job until I have time to read all the howtos.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.