Post
by patrice4419 » Thu Mar 27, 2014 6:07 pm
Hmmm, nice question, however not all that helpful for somebody who seems to be a newbie? Nice chat about ufw firewall but not much what and how.
I would set up ufw first then gufw. But and it's a big but (not mine I hasten to add) gufw is not the easiest to set up. Using the Terminal inputs is faster and more accurate. Also bear in mind the sequence of the rules you are going to set up. It is not difficult, so:
#Enable the firewall and check whether it will start on boot as well
sudo ufw enable # I have assumed you have downloaded the program via Synaptic or Software Manager
# Set up the policy
Sudo ufw default deny
# Set up your udp ports needed (if wanted check what they do by googling port number)
sudo ufw allow out 53,137,138/udp
#Next set up ports out for tcp traffic
sudo ufw allow out 20,21,22,25,80,139,143,443,445,465/tcp
#If using a network printer use the line next or if not, comment out.
sudo ufw allow out proto tcp from port 9100 to 192.168.1.0/24 #assuming you use the 192 etc octets, port 9100 is mostly used for print tasks.
#allow CUPS - again assuming you have downloaded CUPS - if not it is available via Software Manager, just click to install.
sudo ufw allow CUPS
#close off everything else
sudo ufw deny out to any
#Try this first and if necessary and other ports are needed such as ssh then perhaps you ought to consider limiting this by inserting the following line
#sudo limit ssh/tcp (Insert this line after the line denoting port 22)I have commented the line so if you copy the lot it will not work until you uncomment it.
You should also check the logs - they can become rather large so consider using 'logrotate' - /etc/logrotate.conf or see 'man logrotate'.
The last thing I would advise newbies is do use a Firewall - ufw is quite good, works well. I know it is a frontend for iptables but that is not for newbbies unless they want a few cancelled holidays (like mine!).
You might also consider anti-virus - ah I can already hear the teeth gnashing of those who state bluntly Linux is super safe. Well, there is no such thing as super safe, trojans, malware abound. It is true though that Linux having a much lower userbase does not have a lot of trouble but as time goes on it might be a growing art. However - ClamAv is available and Comodo do a free prog as well. I use ClamAV at the moment. Yep I am paranoid.
Hasta la vista, amigo and welcome to Mint - yo've made the right choice.
(Penguin PocketWee running Mint 17.1 Cinnamon, Intel Dual Core i5-4250U 1.3Ghz (2.6 Turbo), 8Gb DDR3, mSATA SSD 250Gb, wireless dual band.
The router (D-Link DS3580L) with USB slot.
