Do I need a firewall??

[tisse]

I have a small web and file server at home. The server runs Apache, PHP, mySQL, ssh, samba (no desktop though, it doesn't even have a monitor). It connects to the network through a router with a built-in firewall with port 80 and 22 open to Internet.

My question is if I need to install a firewall or any other security programs?

[icheyne]

Not really. The router will protect you from incoming traffic.

If you were on a Windows machine, I might recommend that you have a software firewall (e.g. Kerio) to detect outgoing connections from spyware, but that's not a problem for Linux.

[tisse]

Thank you.

I thought that would be the case but I was not really certain.

[nkassi]

Actually a firewall with iptables would not hurt. If it's too much trouble don't worry about it but it could be a nice learning opertunity.

Nic

[mushr00m]

I found that when I was in the same place as you it was interesting to learn about using iptables, I started with firestarter and it went from there.

try 'man iptables' and see if that is something to learn.

mushr00m

[tisse]

I will have a look at iptables, thanks for the tip.

/Tisse

[LordHunter317]

Actually a firewall with iptables would not hurt.Actually it could, because it compicates network configuration for no gain. You do no setup firewalls without need and reason.