Firewall (with selective access)

KETrel · 10-05-2004, 03:35 PM

I'm looking for a firewall that not only functions as a incomming firewall, but will allow me to pick and choose what programs may access the internet. Basically like what zonealarm for windows lets you do.

A gui would be a major plus.

scottman · 10-05-2004, 03:52 PM

Hey KETrel,

I'm not familiar with the GUI's out there, but I do know iptables allows you to filter OUTGOING packets by PID, UID, and the name of the process sending it. An example rule would be

Code:

$IPT -A OUTPUT -p udp --dport 33434:33523 \
-m owner     --cmd-owner traceroute \
-m state     --state NEW,ESTABLISHED \
-j ACCEPT

This rule allows only the program traceroute to go out by using -m owner --cmd-owner traceroute

KETrel · 10-05-2004, 06:16 PM

Quote:

Originally posted by scottman
Hey KETrel,

I'm not familiar with the GUI's out there, but I do know iptables allows you to filter OUTGOING packets by PID, UID, and the name of the process sending it. An example rule would be

Code:

$IPT -A OUTPUT -p udp --dport 33434:33523 \ -m owner --cmd-owner traceroute \ -m state --state NEW,ESTABLISHED \ -j ACCEPT

This rule allows only the program traceroute to go out by using -m owner --cmd-owner traceroute

I would say it's all greek to me, but I'm not even sure that's greek lol
Me =

scottman · 10-05-2004, 07:37 PM

I'm sorry guy, iptables is a built-in firewall system that you can use to create custom rules from the command line, or from a script. There are many applications that provide GUI's to do this for you. There are also many tutorials available, and posts regarding iptables if you are interested. As far as the GUI's go, they should allow you to filter traffic going out of your cpu as well as coming in. I'm sure there are many readers who know more about the available GUI's out there, hopefully one can add a post to point you in the right direction.

P.S. You were right, it WAS greek.

win32sux · 10-05-2004, 09:57 PM

well, there's firestarter (a GUI to iptables):

http://firestarter.sourceforge.net/

but you're much better-off learning iptables "for real" if you can:

http://www.linuxguruz.com/iptables

Skyline · 10-06-2004, 07:00 AM

In addition - another GUI front-end for iptables: Guarddog might be worth having a look at:

http://www.simonzone.com/software/guarddog/

a1ntsk33r3d · 10-06-2004, 10:41 AM

...that Zone Labs is working on a Linux version of their Windows firewall client program.

KETrel · 10-06-2004, 12:05 PM

on the subject of firestarter, I installed that a while ago, and later I rebooted, and it was in my services that start at bootup, now with it active, the computer acted horrible, half the things open would freeze, I lost the use of the middle mouse button and I while in mozilla, I could click my bookmarks and use the menus at the top, trying to interact with anything in the actual page (links, etc.) didn't work and while any browser was open, nothing else would work until it was closed (which in cludes the taskbar thing at the bottom, and ksystemguard so I couldn't close it that way either)

Needless to say I disabled the firestarted service.