[SOLVED] do i need more than firestarter for protection?

[lovinglinux]

Yes, that is the problem with firestarter, running the gui, worse if running it all the time.

In my experience Firestarter often fails as you start to build complex rule sets and are using NAT.[/code]

I have no server running, my desktop is wired to the router and I have a notebook connected by wireless. That is my local network. So I guess those issues won't be a problem, right?

The "nice" thing about UFW , IMO, on the command line, is that you will start to understand how iptables works.

Can you make outbound traffic restrictive like Firestarter? This sounds useless, but I like to have full control of my network traffic.

I think you would like the commands "iptables-save" and "iptables-restore"

What you do is set up your rules and then :

sudo bash -c " iptables-save > /root/firewall.rules"

Then to restore those rules

sudo bash -c "iptables-restore < /root/firewall.rules"

So, let's assume I have created my own rules or replicated all rules created by Firestarter. If I use those commands above I can uninstall Firestarter and just modify rules that I need temporarily, for example to open a port or change outbound policy? If I don't use iptables-save after adding new rules, when I restart I will allways get my basic rules back right?