Page 1 of 2 12 LastLast
Results 1 to 10 of 19

Thread: firewall for home network question

  1. #1
    Join Date
    Mar 2006
    Location
    Earth
    Beans
    632
    Distro
    Ubuntu 18.04 Bionic Beaver

    firewall for home network question

    Hi Ubuntuerainians and Ubuntuettes!!

    i have a home network with 3 computers:
    1. a "server" with lots of hard disk space running Ubuntu 18.04
    2. a Lenovo laptop running Ubuntu 18.04, and
    3. a raspberry pi running the latest raspian.


    The laptop and raspberry pi computers have read-only access to

    Folders on the "server" are accessed by the laptop and raspberry pi computers using NFS. The pi and lenovo computers have read-only privileges.

    Also, the pi machine can be accessed using Remina RDP from both the "server" and the laptop.

    After loosing my identity several times for no fault of my own, I came the to conclusion that I want to protect my home computers and network.

    I tried installing GUFW.... seemed nice and simple, but could not figure out the "rules" to add to each machine to make it work.... and during this experimentation, neither the pi or laptop could access my server.

    Can someone suggest how to procede to add more security either with GUFW or iptables?

    I'm a geezer and have been running Ubuntu since around 2008 and spent alot of time in the early years getting my machines to work. I'm a geezer now and don't want to spend the rest of what is left in my live working on this.... and hope to have a simple solution. I can follow instructions!! Things that a re simple and work are best for me!!

    I'll be so grateful for your patience and advice. If you want to give me step by step directions, I'm good for a coffee the next time you are in town!

    Gratefully!
    Old Old Old Old Old Jimma from the Old Country

  2. #2
    Join Date
    Mar 2010
    Location
    Squidbilly-Land
    Beans
    20,487
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: firewall for home network question

    Every computer should be running a firewall. Each needs to configure have the firewall configured locally. There's no way you can use a firewall on a Linux desktop to protect a raspberry-pi from the internet or some other desktop.

    You should also have a router that also runs a firewall, probably blocking all inbound requests and many outbound requests. For this device, it is important that the router firmware be upgraded every month with patches. If the vendor doesn't provide updates at least quarterly, check whether the device is still supported. Might need a new router or need to find some after-market firmware to use, which is updated monthly.

  3. #3
    Join Date
    Nov 2008
    Location
    Metro Boston
    Beans
    15,102
    Distro
    Kubuntu 20.04 Focal Fossa

    Re: firewall for home network question

    I have no firewalls on any computer behind my two routers.
    If you ask for help, do not abandon your request. Please have the courtesy to check for responses and thank the people who helped you.

    Blog · Linode System Administration Guides · Android Apps for Ubuntu Users

  4. #4
    Join Date
    Apr 2008
    Location
    Norwich CT
    Beans
    2,661
    Distro
    Ubuntu Mate

    Re: firewall for home network question

    Here's what to do:
    Code:
    sudo ufw enable
    It will return
    Code:
    firewall is enabled and added to startup
    Or words to that effect.

    I drink my Ubuntu black, no sugar.
    Ubuntu user 28819

  5. #5
    Join Date
    Feb 2014
    Location
    Canada
    Beans
    47
    Distro
    Ubuntu

    Re: firewall for home network question

    In my opinion you don't need a firewall, unless you want to provide certain serivices to some users. If you don't run any services you don't need to take care using a firewall.
    Ankman

    My blog https://news-commentaries.blogspot.com
    Retro arcade game web page http://www.ankman.de/mame/

  6. #6
    Join Date
    Mar 2010
    Location
    Squidbilly-Land
    Beans
    20,487
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: firewall for home network question

    Quote Originally Posted by ank2 View Post
    In my opinion you don't need a firewall, unless you want to provide certain serivices to some users. If you don't run any services you don't need to take care using a firewall.
    He's running NFS! That's a service. He needs a WAN firewall and on the LAN, so when NFS is misconfigured or the local firewall is misconfigured, it isn't open to the world. Layered security is needed for normal people.

  7. #7
    Join Date
    Feb 2010
    Location
    South of the Maple Trees
    Beans
    9,247
    Distro
    Xubuntu 18.04 Bionic Beaver

    Re: firewall for home network question

    Quote Originally Posted by TheFu View Post
    He's running NFS! That's a service. He needs a WAN firewall and on the LAN, so when NFS is misconfigured or the local firewall is misconfigured, it isn't open to the world. Layered security is needed for normal people.
    +1 Definitely needed when running services. I have all of my devices on one network and don't want any of the "smart" devices accessing my Motion camera streams. Back when I ran it as "just a desktop," I still enabled UFW.

  8. #8
    Join Date
    Mar 2006
    Location
    Earth
    Beans
    632
    Distro
    Ubuntu 18.04 Bionic Beaver

    Re: firewall for home network question

    Jeepers!!

    I am grateful for the spirited replies!!!

    I will start by enabling a firewall for my ubuntu "server."

    NFS is already set up and working and allows the laptop and raspberry pi to access certain folders on my ubuntu servers. The goal of using ufw is to make sure that nobody else can access files on the server other than the laptop and raspberry pi.

    Please review my rules to see if I've specified the correct ufw rules below!

    1. I'll enable NFS: # ufw enable nfs

    2. Then allow for my laptop: #ufw allow from 192.168.1.71 to any port 80 proto nfs

    3. And, allow for my raspberry pi: #ufw allow from 192.168.1.98 to any port 80 proto nfs

    Do these commands achieve my goal?

    (I really don't know why I should use port 80 rather than any other port. Can someone comment on this?)

    Thanks,
    Old JImma

  9. #9
    Join Date
    Mar 2010
    Location
    Squidbilly-Land
    Beans
    20,487
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: firewall for home network question

    I don't think this does what you want.
    We need to see
    Code:
    sudo ufw status
    output.

  10. #10
    Join Date
    Mar 2006
    Location
    Earth
    Beans
    632
    Distro
    Ubuntu 18.04 Bionic Beaver

    Re: firewall for home network question

    Here is the results from doing a
    sudo ufw status
    :


    sudo: ufw: command not found
    Old Jimma

Page 1 of 2 12 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •