Firewalls for Ubuntu 9.04 Server Edition

[jordanjae]

I need a firewall for an ubuntu server project I'm doing, my friend is using untangle and I want something similiar, any ideas for firewalls?

[ray62]

Hi i av Gufw 9.04.2 dont no if i will do for server edition tho ?

[piankhi]

Ubuntu comes with a firewall built into the kernel. Its called iptables. I'd recommend going through the following 3 pages:

https://help.ubuntu.com/8.04/serverguide/C/firewall.html
http://ubuntuforums.org/showthread.php?t=159661&highlight=iptables
http://ubuntuforums.org/showthread.php?t=668148


iptables has various GUIs/frontends if you are not comfortable with the command line or bash scripts. Just google iptables GUI or iptables frontend.

[ray62]

is that no good what i have ?

[piankhi]

Gufw is fine if you're comfortable with it. It is simply a gui for iptables as far as i understand.

[gnuisancev3]

Gufw is fine if you're comfortable with it. It is simply a gui for iptables as far as i understand.

Gufw is a GUI for ufw, which is a simplified command line front end to iptables.

If you want the most control you should really learn how to use iptables.

[piankhi]

Gufw is a GUI for ufw, which is a simplified command line front end to iptables.

If you want the most control you should really learn how to use iptables.

Thanks for putting it better than i could. Wanted to originally say its a gui for iptables by proxy, but thought using the word proxy would confuse him/her. cheers..

[ray62]

i am a newbie and confused lol

[p0rnflake]

Whats your guys position on using iptables vs securing/patching the system ?

In the Window$ world :evil: there's often alot of debate about the added software in form of the firewall code actually just increases the chance of vulnerabilities - I guess the same could be said for Linux ?

[RecNes]

Is there any console based user interface package for ufw or iptables?

[QLee]

Whats your guys position on using iptables vs securing/patching the system ?

My position is that it's not an either/or situation. Use sensible iptables rules *and* keep your system patched and optioned securely.

In the Window$ world :evil: there's often alot of debate about the added software in form of the firewall code actually just increases the chance of vulnerabilities - I guess the same could be said for Linux ?

It could be said but it would be an incorrect statement. It would only be correct if one chose bad software or mis-configured in some way. Iptables is part of the system, the GUI frontends can just make it a bit easier to add and remove rules.