Results 1 to 4 of 4

Thread: Linux As A Firewall

  1. #1
    Join Date
    Nov 2007
    Beans
    239

    Angry Linux As A Firewall

    I know, from experience, that Linux Servers are used in many commercial settings as a firewall for Windows computers. So coomes my question, I seldom use any Windows apps today but am setting up one for a friend in business and I need to know in placing it inside Vbox on an Ubuntu unit makes it safer?

    Thanks for any and all replies in advance.
    Last edited by CharlesA; August 28th, 2012 at 07:02 PM. Reason: windoze

  2. #2
    Join Date
    Mar 2010
    Location
    Metro-ATL
    Beans
    Hidden!
    Distro
    Lubuntu 14.04 Trusty Tahr

    Re: Linux As A Firewall

    Nope, not by itself.

    There are lots of guides to create
    * a secure network
    * a locked down Linux
    * a locked down MS-Windows
    * a router
    * a firewall
    * an IPS/IDS

    You can do these things inside virtual machines if you like, but some things like firewalls and routers are best inside dedicated hardware. Sure, you could build them inside a VM and it might be more secure than without them, but the ability to make a tiny mistake and not have any security exists.

    Every OS should run a firewall, even if there's a network-based firewall. Whenever possible a network firewall should be used too.

  3. #3
    Join Date
    Oct 2009
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Linux As A Firewall

    TheFu pretty much covered it.

    A VM is as safe or as vulnerable as a physical machine. Lock it down if you want to limit the risk.
    Come to #ubuntuforums! We have cookies! | Basic Ubuntu Security Guide

    Tomorrow's an illusion and yesterday's a dream, today is a solution...

  4. #4
    Join Date
    Sep 2006
    Beans
    7,412
    Distro
    Lubuntu Development Release

    snapshots

    There is one big advantage to running such an insecure system inside a virtual machine: snapshots. You can roll back to a known good snapshot and have a fresh start any time you want it. It could even be every time. That's a huge advantage over having it on a regular machine and having to wipe and reinstall (thus removing 3rd party apps, too) each time a clean slate is needed.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •