New Firewall application and Lite Widget status

[Jerry]

I'm looking into UFW alternatives. I haven't found the UI for GUFW to be very user friendly. This is when I came across Firewalld.
It has a highly configurable interface, it uses iptables, and I found it very intuitive to use.
With point and click settings, we are definitely onto a winner.



On that note, would you folks who use it, or can think for others, find having a Firewall status on Lite Widget handy?
I remember a member suggesting it for Series 5.x but can't remember who it was so it isn't my idea, but I thought was a good one. Some indicative, reassuring message related to Security.



To recap:

- Would having a Firewall status on Lite Widget, be a good idea?
- What do you think of Firewalld replacing GUFW?

For testers:

Code: [Select]

sudo apt-get remove --purge ufw

Code: [Select]

sudo apt-get install firewalld firewall-config
Menu > Settings > Firewall

Resources:

https://firewalld.org/

[trinidad]

Firewall status in the widget is a great idea.

As far as GUFW I don't use it at all, or even instruct others how to use it anymore. I think the responses are confusing to new users and configuration is too slow. I do use and teach new LL users how to use UFW from the CLI which is very straightforward and easy to understand. Both Firewalld and GUFW are over thought/designed. A simple tutorial in the help manual for UFW not GUFW would be better. It is by far the simplest and least confusing to use for new LL networking users. A tiny bit of CLI is not bad for new users. This is one case where I feel a GUI application is not more intutive or safe for new users. Most Windows users don't know how to use the firewall properly for extended networking. 

TC   

[supergamer]

I agree about being shown Firewall status. I also agree with the simple GUI is not so simple for new users. What about just a simple ON/OFF button. I am not going to get into the the table settings as that is a thread upon itself but I do think just something that is simple with moderate settings might be a solution. I think if a user needs more from the Firewall then they would learn about it or install a GUI for it.

[Jerry]

Further to this, should Lite Widget be on the Desktop by default in all releases? I'm thinking of putting it in the 5.0 Rc and seeing what the feedback is like.

[firenice03]

Further to this, should Lite Widget be on the Desktop by default in all releases? I'm thinking of putting it in the 5.0 Rc and seeing what the feedback is like.

I like it and use it(the Widget), I've added "Network Strength" to mine for Wi-Fi... Maybe have firewall status - along the same lines of cpu/memory or inline with those.. I like "Updates" being predominant..


I think once firewall is enabled/set correctly its not called upon until needed... I've used firewalld/iptables in RHEL and derivatives but via command line...
A simple GUI (ugh almost Windows esk) with enable/disable -- maybe with the Home/Public/Office pre-configs ... then an advanced section to further tweak.. *Thinking along the line of windows refugees... Sure that would be dependent on the software available...


I'll load the firewalld GUI and take a closer look... Kudos Mr. Jerry - always on the look out !!!

[LL-user]

I'd opt for showing the status of the firewall. But conditional, meaning only showing it if it's turned OFF.
I use the Widget on all machines I install for others, however a customized one.

[trinidad]

Apparently I'm a little behind again, though I've been using nftables on Debian 10. Firewalld is about to become the default for the next release of Debian and iptables are being deprecated.

https://ral-arturo.org/2019/10/14/debian-netfilter.html

So Jerry once again your choice seems appropriate and timely.

Considering that the 5.x series will be XFCE perhaps an icon for firewall status; green for on, red for off, in the lower right panel would be better than the widget. Windows defender places an icon in the lower right corner system tray.

TC 

[torreydale]

I don't use the widget.  I would not want it as a default.  Just my two cents.

[tek10]

The widget is easy enough to turn on or off as a user prefers. I use it and the people I've turned on to Lite continue to leave it on their desktops. "On" by default would be fine.

I don't like the firewall status on the widget. As part of setting up a new installation, I make sure the firewall is turned on and leave it that way except in rare instances. I don't need or want that status on my desktop all the time. That said, I modify the widget anyway and can remove the status if included in future versions.

[Jerry]

wee bump

[firenice03]

wee bump

@Jerry

Soooo I had to play a lil..
I like the added FW status - although I usually set it and forget it...

Still using UFW but added a quick n dirty - inline variable ... I do like the status color of yours...
 
Maybe a different perspective??

 


 

[Jerry]

Do you have the code for your work? If so, I'd like to see it please.

[firenice03]

I do and most definitely..


I will send it over after work 

[bonnevie]

I never play with the firewall rules for lack of knowledge. When it's ON, I never look back until the next install. If Jerry makes it easier to tweak and visible in the tray, fine! But it's not something I look for or need, to be honest. I see it as a -plus- for more advanced LL users and I'm OK with that.  It may get me interested into learning more!