Looking for: Firewall that ask user for permission

[ubutu]

Does Linux have a firewall that ask my permission before granting access to outbound/inbound traffic?

For instance, I installed a program then it goes on the internet and does whatever it please. I know Antivirus in Linux is not needed, but anyone can write a program that collects user data and connect to whatever server.

I'm looking for something like what COMODO in Windows has. It ask the user's permission for ANYTHING to run, move or breathe and has the ability to remember/learn the user's action.

Ubuntu has iptables and Firestarter to configure it, is that all I have to work with? I just need a simply method to ensure ALL applications ask my permission before accessing the web.

Thank you

[Kalma]

Well, that is my case as well: I remember COMODO and ZoneAlarm with some nostalgy... They were so easy to use.

I'm affraid Linux doesn't work in the same way. What you need to control outbound requests is a proxy. I would recommend you use Squid + User Authentication.

You may find how I managed to get it working (it was really hard for me because I am not a Linux expert, just migrated from Windows as well). I also use Dansguardian as parental control, but you can omit this part.

http://ubuntuforums.org/showthread.p...ontrol&page=16

Good luck.

[cariboo]

If seems you didn't understand the info you were given in the other thread you posted in. Firestarter is not recommend as a firewall frontend, as it hasn't been updated since 2005.

There is no interactive firewall needed. Any knowledge you gained running Windows does not transfer to a Linux variant. I would suggest you run a portscan against your Ubuntu system from another computer, to see what ports are actually open. You can use nmap to check for open ports, if you are uncomfortable using a terminal, there is a gui for nmap called zenmap, both are available in the repositories.

If you don't understand the results you get, post them here, and you'll get an explanation of what is going on.

[ubutu]

I like how everyone knows exactly what I need and ignore what I'm asking for......I'll try and ask specific questions, either you know or you dont. Please no debates. Thank you.

Once an application is run, how to monitor and limit everything it does and make it ask my permission to go or do anything?

A member suggested AppArmor as closest, currently reviewing..............
.
.
.
.
.
.
.................................................. ...........................................
:"No, I don't care how it work, just as long as it does"

[cariboo]

Appamour won't do what you want. Could please give us an example, what program do you want to control?

[JayRobert]

The Security page might also be a good place to start. I'm also coming from Windows, and learning about how different the security issues in the Linux world are.

Looks like there might not be the exact thing you're accustomed to in Windows, but I think there are tools available that will help you control your ports.

[cariboo]

In Linux we don't worry about outbound connections, because the user initiates them, there is nothing in the background running that needs an outbound connection unless you start the program/service yourself.

If you really aren't sure run wireshark, when you have nothing running to see what your network connection is doing, then start running the programs/services you are worried about one at a time, and watch the output. Wireshark is in the repositories.

[Soul-Sing]

Once an application is run, how to monitor and limit everything it does and make it ask my permission to go or do anything?

For limiting out bound connections:

http://blog.bodhizazen.net/linux/fir...untu-desktops/
http://blog.bodhizazen.net/linux/fir...buntu-servers/

A firewall has to be "constructed" in Linux, it is not building up itself via asking or denying permissions as in Windows.