Firestarter

From TheLinuxVault

Jump to: navigation, search


Free Open Source Software
Firestarter


Managed by: Tomas Junnonen

Visit the Website!
Current Stable Release: 1.0.3
License: GPL

Firestarter is a GUI firewall for Linux based on iptables. It can be used on either a host computer, a server computer, or both simultaneously.


Contents

[edit] Firestarter

Firestarter Status Page
Firestarter Status Page

There are 3 main parts to the Firestarter GUI: Status, Events, and Policy.

[edit] Status

The status page displays the state of the firewall (Active, Disabled, Locked), the network activity of each network device, and the current active network connections. From this page the state of the firewall and Firestarter preferences can be changed

[edit] Events

The events page shows connections that have been blocked. Duplicate blocked connections can be ignored in the preferences. The list can be saved.

[edit] Policy

Under the policy page, inbound and outbound connection policies can be changed. By default, it will block all inbound connections that are not allowed. It can be set to allow (permissive by default) or to deny (restrictive by default) all outbound connections that do not have a rule set.

[edit] Configuration

[edit] Ports that need to be opened for Samba networking:

Using OpenSSH and SSHFS is more secure works better sometimes. SSH uses port 22

If you select "allow service" and click "add rule" on the policy page, and select "Samba(SMB)", it will give you the rule:

137-139 445

You may also need to create a rule for:

631

You may also need to create a rule for something called "Sun-RPC portmap" starting at 32772 and up indefinitely:

32772-33944

[edit] If programs report that they cannot connect to the internet:

If the blue icon on the taskbar has gone red, connections have been blocked. click on the icon and look at the events page. You can right click events and select "Allow Inbound Service for Source" to add a rule to the inbound policy, which can be edited to allow the type of connection you need.

[edit] If You're having problems getting Firestarter to run at startup, here's a solution:

Install Firestarter just like it tells you at http://www.fs-security.com/docs/faq.php except add 2 things to sessions:

sudo firestarter --start-hidden
xhost local:USERNAME

And put the "xhost" command at 20 and the "firestarter" command at 80. (USERNAME) is the name you use to log on to Linux with.

[edit] See Also

Security

[edit] External Links

Personal tools