Forum Home
Press F1
 
Thread ID: 49670 2004-09-27 02:49:00 Do I need a firewall with Linux i-gordon (962) Press F1
Post ID Timestamp Content User
275917 2004-09-27 02:49:00 I read a lot of stuff about all the trojans & spybots that can affect Windows OS's, and I believe it. I wouldn't even switch my comp on without a firewall. My setup is a home network of 3 computers, 2 are dual boot with WindowsXp and Linux, 1 is Suse the other is Xandros. The other comp is Windows2000 Pro. They are all connected to an ADSL Nat Router. All the Windows Comps have Agnitum Outpost Firewalls. The Linux OS have no firewalls. I tried to install Firestarter on Xandros but it keep locking up. Do I really need a firewall ? i-gordon (962)
275918 2004-09-27 03:13:00 Because it's based on Unix (like Mac OS *shudder*), it dosen't :) Megaman (344)
275919 2004-09-27 03:21:00 *BUT* it is possible for someone to hack into your computer and take control of it or delete files thewhiz (4002)
275920 2004-09-27 03:38:00 For most people the routers NAT ability will block any incoming connections that didn't originate from within the network.

This is why some people with routers just "hide" behind the router, and will occasionally use software firewalls to see what is accessing the internet and ensure everything is kosher. The same rule applies to every machine behind the network so in this scenario no.

However, for those who take the "better safe than sorry" approach, they strictly firewall everything and then hide behind their router - the one thing they have to watch with this is as it's the UTP connection that's the live connection they can end up disabling network multiplayer games, dhcp requests, etc.

The choice is yours.


The one thing people seem to overlook is that Linux initially started off as a server suite which evolved to the desktop/home market - which is why there are daemons such as opensshd, sendmail, httpd, etc running, which is where the warning is. Leaving these daemons running for no good reason is just asking for trouble - most home users can disable these.
Remember that anything is possible and there's no such thing as a secure/unhackable/non-crashable program.
Wood-Chuck (6195)
275921 2004-09-27 04:15:00 I'm not worried about anyone on the home network accessing the other comps. The Linux OS can easily access any WindowsOS thats running, that is how we want it. What concerns me is this easy access from Linux would allow a hacker to see the whole system. I realize nothing is absolutly secure, I think I have the Windows OS as tight as I can get it I'm just concerned with leaving a weak link in the chain. i-gordon (962)
275922 2004-09-27 05:15:00 Personally I'd say No, for Desktop usage.

For a server - Better safe than sorry.

I dont mind my PC being open for SSH connections for the world because I want to ssh into it myself. People simply need to know my password.

My answer:
If you want

If its for LAN - Not much point... You cant get network viruses etc so why bother ;-)
Chilling_Silence (9)
275923 2004-09-27 05:21:00 Being more paranoid than Chill, I'm waiting for the new Nix network worm.
Especially now that windows has been secured, malware authors will be searching for new targets :|

So, buckle up, don't be a statistic.

Cheers Murray P
Murray P (44)
275924 2004-09-27 06:34:00 > Being more paranoid than Chill, I'm waiting for the
> new Nix network worm.
> Especially now that windows has been secured, malware
> authors will be searching for new targets :|
>
> So, buckle up, don't be a statistic.
>
> Cheers Murray P

I'm inclined to agree.
Which Firewall ?
Where from ? and how do I install it. I've never installed a Linux program other than the self installers from the Distro sites.
Thanks everyone for the feedback.
i-gordon (962)
275925 2004-09-27 06:57:00 I'vw only had experience with Guard Dog (& it's companion Guide Dog) in Mepis (deb based like Xandros) and Yoper. You can set up either from the KDE control centre or find them in System, I think, as I'm just about to reinstall Yoper after a major system overhaul I can let you know later or someone else will have it off by heart. They're fairly intuitive but, you need to remember Guard Dog is set up when you try to connect with your new P2P or messaging app, etc.

Cheers Murray P
Murray P (44)
275926 2004-09-27 07:04:00 > I'm inclined to agree.
> Which Firewall ?
> Where from ? and how do I install it. I've never
> installed a Linux program other than the self
> installers from the Distro sites.

You have already mention Firestarter ( You said you tried to install it on Xandros but it locked up? I see Firestarter (0.9.3-5) is in the Debian unstable branch even though it is the latest stable release of Firestarter. Perhaps download the deb package (http://packages.debian.org/cgi-bin/download.pl" target="_blank">firestarter.sourceforge.net/) which is a good firewall. You said you tried to install it on Xandros but it locked up? I see Firestarter (0.9.3-5) is in the Debian unstable branch even though it is the latest stable release of Firestarter. Perhaps download the deb package (http:) and try it again. You can save this package into your /home directory and then use the Xandros Networks to install it for you (there is an option somewhere for installing packages - basically just point it at the package).

BTW, I don't use a software Firewall on my Linux boxes either. My router does NAT, and I have closed down all unnecessary services myself that are set to run by default.
Jen C (20)
1 2 3 4