Personal Firewall - Revision history

Sasha: Added mac instructions

2015-03-15T16:25:49Z

Added mac instructions

Rorist: /* Linux */

2015-03-15T01:13:51Z

‎Linux

Rorist: /* Linux */

2015-03-15T01:13:23Z

‎Linux

Rorist at 01:12, 15 March 2015

2015-03-15T01:12:19Z

CrazyGolem at 08:38, 4 May 2012

2012-05-04T08:38:47Z

CrazyGolem at 19:17, 2 May 2012

2012-05-02T19:17:05Z

CrazyGolem: /* Linux */

2012-05-02T19:13:49Z

‎Linux

CrazyGolem: /* Windows */

2012-05-02T19:07:19Z

‎Windows

CrazyGolem: Created page with "Fixme network is not firewalled. If you connect to ''FIXME'' or ''FIXME-5GHz'' WiFi networks, you'll get a public IP address and your machine will be exposed to Internet. If you ..."

2012-05-02T18:51:07Z

Created page with "Fixme network is not firewalled. If you connect to ''FIXME'' or ''FIXME-5GHz'' WiFi networks, you'll get a public IP address and your machine will be exposed to Internet. If you ..."

New page

Fixme network is not firewalled. If you connect to ''FIXME'' or ''FIXME-5GHz'' WiFi networks, you'll get a public IP address and your machine will be exposed to Internet. If you connect to ''FIXME_NAT'', you won't have a public address, but it is however good practice to install a firewall.

== Linux ==
You can use [https://help.ubuntu.com/community/UFW UFW • Uncomplicated Firewall], the default firewall configuration tool for Ubuntu (disable by default on Ubuntu). [http://gufw.tuxfamily.org GUFW] is a very nice and simple GUI for ufw.

If you chose GUFW, you have to click on the ''Unlock'' button after starting the GUI, then check ''Activate'' or push the ''Status'' slider to the ''On'' position. The default configuration (Incoming: Deny; Outgoing: Allow) is a good start for beginners, and contrary to what it claims, critical service messages will still be able to reach your machine, as well as incoming packets for which you established the connexion (it is a stateful firewall).

You can use <code>iptables -L</code> to list enforced rules.

Use <code>netstat -laputen | grep -i listen</code> to know which services are listening on which interface/port. If you activated the firewall, listening ports might not be reachable unless you configured your firewall to accept incoming connection to these services.

You can use ''nmap'' from another computer to determine whether there still are open ports on your machine after the firewall is configured:
* <code>nmap -sS ''<IP Address>''</code> will scan the specified IP Address for low-range ports (<1024).
* <code>nmap -p- ''<IP Address>''</code> will scan all the ports of the machine behind the given IP Address.

== Windows ==
Since Windows XP, a firewall is included in Windows. However, until Windows XP SP2 it was disabled by default. An unconfigured Windows Firewall denies inbound connections and allows outbound connections.

There are more complete and free (i.e. gratis) solutions. You can find some of theme on a [http://lifehacker.com/5061933/five-best-windows-firewalls rather old article of Lifehacker] or on Google.

← Older revision		Revision as of 16:25, 15 March 2015
Line 22:		Line 22:

	Use <code>nmap</code> from another machine to test your firewall configuration.		Use <code>nmap</code> from another machine to test your firewall configuration.
		+
		+	== Mac ==
		+	Just deselect all sharing options. Unless you have any services you ran yourself (e.g. background tool, itunes sync, something over the command line, etc), this should cover most of what you need.
		+	[[File:Mac_firewall.png]]

@@ Line 6: / Line 6: @@
 If you chose GUFW, you have to click on the ''Unlock'' button after starting the GUI, then check ''Activate'' or push the ''Status'' slider to the ''On'' position. The default configuration (Incoming: Deny; Outgoing: Allow) is a good start for beginners, and contrary to what it claims, critical service messages will still be able to reach your machine, as well as incoming packets for which you established the connexion (it is a stateful firewall).
-You can use <code>sudo iptables -L</code> or <code>sudo lsof -i -n</code> to list enforced rules.
+You can use <code>sudo iptables -L</code> to list enforced rules.
-Use <code>netstat -laputen | grep -i listen</code> to know which services are listening on which interface/port. If you activated the firewall, listening ports might not be reachable unless you configured your firewall to accept incoming connection to these services.
+Use <code>netstat -laputen | grep -i listen</code>  or <code>sudo lsof -i -n</code> to know which services are listening on which interface/port. If you activated the firewall, listening ports might not be reachable unless you configured your firewall to accept incoming connection to these services.
 An alternative to the above use of ''netstat'' is <code>lsof -i -n</code> which shows open ports and open connections in a nice way.

← Older revision		Revision as of 01:12, 15 March 2015
Line 1:		Line 1:
−	Fixme network is not firewalled. If you connect to ''FIXME~~'' or ''FIXME-5GHz~~'' WiFi ~~networks~~, you'll get a public IP address and your machine will be exposed to Internet. If you connect to ''FIXME_NAT'', you won't have a public address, but it is however good practice to install a firewall. ''Remember that you are in a hackerspace, and that in hackerspaces there are hackers. Not protecting your machine is an invitation to the Lulz.''	+	Fixme network is not firewalled neither is NATed. If you connect to ''FIXME'' WiFi network, you'll get a public IP address and your machine will be exposed to Internet. If you connect to ''FIXME_NAT'', you won't have a public address, but it is however good practice to install a firewall. ''Remember that you are in a hackerspace, and that in hackerspaces there are hackers. Not protecting your machine is an invitation to the Lulz.''

	== Linux ==		== Linux ==

@@ Line 2: / Line 2: @@
 == Linux ==
-You can use [https://help.ubuntu.com/community/UFW UFW &bull; Uncomplicated Firewall], the default firewall configuration tool for Ubuntu (disable by default on Ubuntu). [http://gufw.tuxfamily.org GUFW] is a very nice and simple GUI for ufw.
+You can use [https://help.ubuntu.com/community/UFW UFW &bull; Uncomplicated Firewall], the default firewall configuration tool for Ubuntu (disabled by default on Ubuntu). [http://gufw.tuxfamily.org GUFW] is a very nice and simple GUI for ufw.
 If you chose GUFW, you have to click on the ''Unlock'' button after starting the GUI, then check ''Activate'' or push the ''Status'' slider to the ''On'' position. The default configuration (Incoming: Deny; Outgoing: Allow) is a good start for beginners, and contrary to what it claims, critical service messages will still be able to reach your machine, as well as incoming packets for which you established the connexion (it is a stateful firewall).
@@ Line 19: / Line 19: @@
 Since Windows XP, a firewall is included in Windows. However, until Windows XP SP2 it was disabled by default. An unconfigured Windows Firewall denies inbound connections and allows outbound connections.
-There are more complete and free (i.e. gratis) solutions. You can find some of theme on a [http://lifehacker.com/5061933/five-best-windows-firewalls rather old article of Lifehacker] or on Google.
+There are more complete and free (i.e. gratis) solutions. You can find some of them on a [http://lifehacker.com/5061933/five-best-windows-firewalls rather old article of Lifehacker] or on Google.
 Use <code>nmap</code> from another machine to test your firewall configuration.

← Older revision		Revision as of 19:17, 2 May 2012
Line 1:		Line 1:
−	Fixme network is not firewalled. If you connect to ''FIXME'' or ''FIXME-5GHz'' WiFi networks, you'll get a public IP address and your machine will be exposed to Internet. If you connect to ''FIXME_NAT'', you won't have a public address, but it is however good practice to install a firewall.	+	Fixme network is not firewalled. If you connect to ''FIXME'' or ''FIXME-5GHz'' WiFi networks, you'll get a public IP address and your machine will be exposed to Internet. If you connect to ''FIXME_NAT'', you won't have a public address, but it is however good practice to install a firewall. ''Remember that you are in a hackerspace, and that in hackerspaces there are hackers. Not protecting your machine is an invitation to the Lulz.''

	== Linux ==		== Linux ==

← Older revision		Revision as of 19:13, 2 May 2012
Line 9:		Line 9:

	Use <code>netstat -laputen \| grep -i listen</code> to know which services are listening on which interface/port. If you activated the firewall, listening ports might not be reachable unless you configured your firewall to accept incoming connection to these services.		Use <code>netstat -laputen \| grep -i listen</code> to know which services are listening on which interface/port. If you activated the firewall, listening ports might not be reachable unless you configured your firewall to accept incoming connection to these services.
		+
		+	An alternative to the above use of ''netstat'' is <code>lsof -i -n</code> which shows open ports and open connections in a nice way.

	You can use ''nmap'' from another computer to determine whether there still are open ports on your machine after the firewall is configured:		You can use ''nmap'' from another computer to determine whether there still are open ports on your machine after the firewall is configured:

← Older revision		Revision as of 19:07, 2 May 2012
Line 18:		Line 18:

	There are more complete and free (i.e. gratis) solutions. You can find some of theme on a [http://lifehacker.com/5061933/five-best-windows-firewalls rather old article of Lifehacker] or on Google.		There are more complete and free (i.e. gratis) solutions. You can find some of theme on a [http://lifehacker.com/5061933/five-best-windows-firewalls rather old article of Lifehacker] or on Google.
		+
		+	Use <code>nmap</code> from another machine to test your firewall configuration.