Questions about post installation guide, dns security and firewall

Lilith156A · 2023-03-24 05:14:29

Do I have to setup a dns and a firewall in my computer?
and I can't understand how to do it from the wiki

vorvac · 2023-03-24 05:45:58

You don't have to, but you also don't have to lock your house at night. You make that decision yourself depending on where you live.

The wiki explains it quite well, have you read these pages?
https://wiki.archlinux.org/title/Securi … _firewalls
https://wiki.archlinux.org/title/Simple … l_firewall

Lilith156A · 2023-03-24 05:52:06

I kinda get the part of the firewall
the one I still can't wrap my head around is the DNS part, do I have to have it in my personal computer?

seth · 2023-03-24 07:52:19

DNS resolves domains (archlinux.org) to IPs (95.217.163.246)
You'll typically get one via dhcp, but if you don't like it, you can configure a custom open DNS server (1.1.1.1, 8.8.8.8, 9.9.9.9 for cloudflare, google and quad9 - search for "open DNS servers")

Trilby · 2023-03-24 13:41:00

FWIW I've experimented with different DNSs just to tinker a bit, but I don't use them on any of my systems regularly. What dhcpcd gets from my ISP is better than any of the options above (which really surprises me, I absolutely loathe my ISP, they screw everything up ... except DNS).

I also don't ever set up a firewall on my home computer as I'm behind an ISP-provided router which blocks most traffic anyhow. But on my public servers a firewall is an absolute must.

So in short, for a joe-regular-user on a personal computer connecting to a major ISP through a router, neither of these are really of any concern (IMHO).

seth · 2023-03-24 13:53:54

ISP DNS are kinda hit and miss and often daytime dependent in their performance.
You can use eg. dig to measure the response time and compare it against alternatives if you worry that the domain resolution slows down your internet.

Another thing about the DNS in use is whether it applies silly DNS filters (MPAA, Porn, CCP) which it might have to for domestic legal reasons or *MUCH WORSE* DNS hi-jacking to redirect unresolvable domains to affiliate links (***grrrr***).
But yes, there's usually no need to take action here unless you know a reason

Arch Linux

#1 2023-03-24 05:14:29

Questions about post installation guide, dns security and firewall

#2 2023-03-24 05:45:58

Re: Questions about post installation guide, dns security and firewall

#3 2023-03-24 05:52:06

Re: Questions about post installation guide, dns security and firewall

#4 2023-03-24 07:52:19

Re: Questions about post installation guide, dns security and firewall

#5 2023-03-24 13:41:00

Re: Questions about post installation guide, dns security and firewall

#6 2023-03-24 13:53:54

Re: Questions about post installation guide, dns security and firewall

Board footer