1

I need a firewall. GUFW a simple firewall was a good option but isnt available on Fedora nor any gui firewall. I checked Vuurmuur its powerful but for noobs & if configured wrongly its a great mess (even their documentation forewarns that). Similarly SeLinux is not a firewall

A firewall controls the flow of traffic to and from a computer to the network. SELinux can confine access of programs within a computer and hence can be conceptually thought of a internal firewall between programs

I think its just a way to protect core filesystem nothing more than that ... So what are my options, please suggest me something some resource that is understandable to a starter & if somehow bugged willn't have irreversible consequences.

Further just tell me if I want to reject in/out traffic for the address(s) containing keyword wolfram e.g pk.server.wolfram or wolfram-mathematica.com how would I do that in iptables or somehow...& if I want to block intenet for application /opt/telepath-gabble how would I achieve that

4
  • ufw is very simple to use and has good documentation...
    – jasonwryan
    Jan 28, 2013 at 6:26
  • selinux is not about the core filesystem (what ever this is) but about providing acls for application, i.e. this application can connect to the internet or open a specific port, read the filesystem etc.
    – Ulrich Dangel
    Jan 28, 2013 at 8:12
  • selinux is internal firewall according to official page how come I control (via selinux) any app's access to net
    – nightcrawler
    Jan 28, 2013 at 8:22
  • @nightcrawler, SELinux is not a firewall. It's a mechanism for managing MAC (Mandatory Access Control, a way of setting up policies that are more detailed and which override user set permissions).
    – vonbrand
    Jan 28, 2013 at 15:32

1 Answer 1

Reset to default
1

If you're happy with the basic configuration, your Fedora firewall defaults to "on" in a basic GUFW way.

3
  • but how do I configure to block a program or unblock it?
    – nightcrawler
    Jan 28, 2013 at 8:21
  • @nightcrawler I would suggest you read netfilter.org and selinuxproject.org/page/Main_Page to get a good grasp on the capabilities of netfilter and selinux. Then try back and ask for help with specifics
    – midnightsteel
    Jan 28, 2013 at 13:20
  • The Fedora firewall by default has most incomming traffic blocked.
    – vonbrand
    Jan 28, 2013 at 15:34

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .