Arch Linux

empthollow

Member

Registered: 2009-09-26

Posts: 168

Lightweight Firewall Dilema[solved]

I do not run typically run a firewall on my machines because they are all behind a router which is firewalled.  However, I would like to have a lightweight firewall for my laptop when I go onto public networks.  In the past I've used firestarter, but it's bit heavy.  I have no expierence with iptables and writing rules so I was wondering what everyone is using for their firewall.

Last edited by empthollow (2010-06-19 06:12:28)

---

--empthollow
Check out my Arch based live distro http://fluxcapacity.99k.org

firecat53

Member

From: Lake Stevens, WA, USA

Registered: 2007-05-14

Posts: 1,542

Website

Re: Lightweight Firewall Dilema[solved]

ufw is a pretty simple command line iptables front end if you're not doing anything too complex.

Scott

---

Github

empthollow

Member

Registered: 2009-09-26

Posts: 168

Re: Lightweight Firewall Dilema[solved]

I'll check it out, I'm just looking for what is usually setup as 'default' - though i'm not sure what that is yet.

Thanks for the suggestion, it's simple and effective, just what I was looking for.

Last edited by empthollow (2010-06-19 06:13:04)

---

--empthollow
Check out my Arch based live distro http://fluxcapacity.99k.org

rwd

Member

Registered: 2009-02-08

Posts: 671

Re: Lightweight Firewall Dilema[solved]

You don't really need a firewall unless you  have insecurely configured applications listening to external ports. You can use this as root to check any listening processes :

netstat --numeric-hosts --listening --tcp --programs

In my case the column 'Local Address' shows that I have only 'dnsmasq'  reachable from outside 0 0.0.0.0 (listening to all interfaces). 'mpd' is listening to 127.0.0.1 (localhost) so it can only be reached from the same computer.:

Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name   
tcp        0      0 127.0.0.1:6600          0.0.0.0:*               LISTEN      3504/mpd            
tcp        0      0 0.0.0.0:domain          0.0.0.0:*               LISTEN      10975/dnsmasq

To check for open ports on other computers in the network, for example if your subnet is '192.168.1.255' do:

nmap -sT 192.168.1.*

Last edited by rwd (2010-06-20 07:59:21)