Default security in ubuntu
somebody wrote there is need for making change some default settings of security in ubuntu to make it more secure. how far this is true? what changes do i have to make?
Question information
- Language:
- English Edit question
- Status:
- Answered
- For:
- Ubuntu Edit question
- Assignee:
- No assignee Edit question
- Last query:
- 2008-06-29
- Last reply:
- 2008-06-30
You configure the default firewall (iptables) through a program called Firestarter.
To install firestarter: at a terminal:
sudo apt-get install firestarter
Note: Firestarter blocks every incoming connection when set-up. You may have to click on its "Events" tab and allow specific connections.
You may configure the default firewall (iptables) through a program called Firestarter.
To install firestarter: at a terminal:
sudo apt-get install firestarter
Note: Firestarter blocks every incoming connection when set-up. You may have to click on its "Events" tab and allow specific connections.
Read aysiu's psychocats documentation on Ubuntu Security: http://
Bhavani Shankar (bhavi) said : | #4 |
When you install Ubuntu, iptables is there, but it allows all traffic by default.
I can bet you that on a default install when you run the command
sudo iptables -nL the result you get is
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
=all traffic allowed ;-)
When you start using p2p applications you become extremely visible and you get all kinds of unwanted connection attempts. If your PC is sat there online with an (possibly unsupported and untrusted) application listening on multiple (or even unknown random) ports you really should have some control over the traffic. So you can learn iptables or use a gui frontend, hence my suggestion to use Firestarter or similar. For a desktop user a nice gui interface fits the Ubuntu philosophy much better than expecting users to correctly set iptables rules by hand and it's very easy and quick to set up. If you don't have iptables configured one way or the other your security policy comes down to only using invulnerable applications (no, I can't think of any either) and unbreakably strong passwords. So install firestarter to monitor your inbound and outbound traffic
To install firestarter
sudo apt-get install firestarter
https:/
Regards
Bhavani Shankar.
Bhavani Shankar (bhavi) said : | #5 |
Also +1 for sayak read aysiu's doc on security or bodhi zaren's post here:
http://
Regards
Can you help with this problem?
Provide an answer of your own, or ask ops for more information if necessary.