166
Linux Firewalls: How to Actually Secure a Cloud Server (iptables, nftables, firewalld, ufw) (blog.hofstede.it)
submitted 3 months ago by to c/technology@lemmy.world
19 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 3 months ago* (10 children)

OpenSnitch is a nice for the desktop environment, deny by default and prompts the user when an application requests a open port, at first the prompts can get a little overwhelming given how many things want to connect to xyz server but eventually lightens up.

  • permalink
  • fedilink
  • source
  • hideshow 10 child comments
    •
  • [–] -2 points 3 months ago (2 children)

    I really dont like the idea that a program on my local os doing things I don't want it to do and the only thing stopping it is a software firewall.

    If you don't trust the platform then you shouldn't be using it. No bandaid like antivirus or firewall can help with that.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 6 points 3 months ago* (last edited 3 months ago) (1 child)

    If you don't trust the platform then you shouldn't be using it. No bandaid like antivirus or firewall can help with that.

    I mean, if you don’t have a firewall on the device itself then your router certainly does, your device requests xyz port open your router will oblige with UPNP unless explicitly denied.

    The on-device firewall is just an extra step before it hits your router’s firewall anyways, I’m sure your devices have made contact with servers behind your back that you know nothing about.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] -2 points 3 months ago (6 children)

    Its a little annoying on Linux but I wonder what it would be like on Windows.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 2 points 3 months ago*

    The firewall is annoying? I would argue and say the firewall is protecting your computer from connecting to a rouge server, annoying or not it’s better than some douche abusing an exploit in your system.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 3 months ago (2 children)

    Glasswire and Tinywall(?) are like this.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 months ago (1 child)

    Simplewall works great, it's open source. And yes, there are a couple of million requests made by windows apps alone, which are completely fine to block. Simplewall also blocks windows telemetry. I have to use win11 at work and it's an absolute ahitstorm of network requests that you don't get to see when using windows firewall.

    Glaswire looks beautiful and functions well, but you will hit the paywall after a couple of weeks (I used this on the around 2010 I think)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •