Debian Buster firewall

[kitkat+]

Hi Debian users

Are you using nftables or firewalld, or have you reverted back to iptables?
Just curious, as I read that iptables is being phased out/discouraged in Debian 10

Thanks
Kitty.

 

[netstrider]

Hi Debian users

Are you using nftables or firewall, or have you reverted back to iptables?
Just curious, as I read that iptables is being phased out/discouraged in Debian 10

Thanks
Kitty.

Subby. Just because... kitty.

 

[r00igev@@r]

Hi Debian users

Are you using nftables or firewalld, or have you reverted back to iptables?
Just curious, as I read that iptables is being phased out/discouraged in Debian 10

Thanks
Kitty.

There is no decent UI for any for those buggers. I have to read the manual twice each time.

 

[rambo919]

I read that KDE is along with it's new system monitor (welcome finally to the modern era ffs) is making it's own proper firewall frontend..... hopefully these are the game changers that wakes gnome the fck up.

I have tried the usual firewalls but they are all hopelessly impractical..... even the windows firewall is superior.

 

[HavocXphere]

Do you guys enable a fw on all your internal Debian installs or in what context is this?

 

[rambo919]

UFW is pretty much as the name implies... uncomplicated... but then I tend to spend way more time in bash.

Too uncomplicated, there are no dynamic prompts and it assumes you know beforehand what you want to block or allow...... it just does the absolute minimum and last I checked only allows or blocks by port...... what if you have two programmes that use the same port but only want to block one?

There is also firejail but it can get wonky.

Like I said, even windows firewall is superior nvm something advanced like zonealarm or comodo..... which reflects badly upon linux.

 

[rambo919]

Almost anything configured from the shell would be complicated for a desktop environment.

I think people often underestimate GUI design and forget that you need an actual talent for it to do it properly. And it often takes years to refine any initial design.

 

[Rocket-Boy]

I script out my firewall rules in iptables.
Admittedly less of that gets handled on the servers themselves these days and more goes through internal firewalls on the network.
With servers you know the source/destination and ports so no need for dynamic popups etc.
I have been a Linux sysadmin for about 18 years now and while I love the server OS, the desktop ones leave a lot to be desired.