Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need a firewall because I was decade long user of internet security suites on windows. I am not a professional of networks or anything but a student who just needs to block unblock running applications... GUFW a simple firewall was a good option but isnt available on Fedora nor any gui firewall & am frustrated over searching it for 2days... I checked Vuurmuur its powerful but for noobs & if configured wrongly its a great mess (even their documentation forewarns that). Similarly SeLinux is not a firewall

A firewall controls the flow of traffic to and from a computer to the network. SELinux can confine access of programs within a computer and hence can be conceptually thought of a internal firewall between programs

I think its just a way to protect core filesystem nothing more than that ... So what are my options, please suggest me something some resource that is understandable to a starter & if somehow bugged willn't have irreversible consequences.

Further just tell me if I want to reject in/out traffic for the address(s) containing keyword wolfram e.g pk.server.wolfram or wolfram-mathematica.com how would I do that in iptables or somehow...& if I want to block intenet for application /opt/telepath-gabble how would I achieve that

share|improve this question
ufw is very simple to use and has good documentation... – jasonwryan Jan 28 '13 at 6:26
selinux is not about the core filesystem (what ever this is) but about providing acls for application, i.e. this application can connect to the internet or open a specific port, read the filesystem etc. – Ulrich Dangel Jan 28 '13 at 8:12
selinux is internal firewall according to official page how come I control (via selinux) any app's access to net – nightcrawler Jan 28 '13 at 8:22
@nightcrawler, SELinux is not a firewall. It's a mechanism for managing MAC (Mandatory Access Control, a way of setting up policies that are more detailed and which override user set permissions). – vonbrand Jan 28 '13 at 15:32

If you're happy with the basic configuration, your Fedora firewall defaults to "on" in a basic GUFW way.

share|improve this answer
but how do I configure to block a program or unblock it? – nightcrawler Jan 28 '13 at 8:21
@nightcrawler I would suggest you read netfilter.org and selinuxproject.org/page/Main_Page to get a good grasp on the capabilities of netfilter and selinux. Then try back and ask for help with specifics – midnightsteel Jan 28 '13 at 13:20
The Fedora firewall by default has most incomming traffic blocked. – vonbrand Jan 28 '13 at 15:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.