You are Here:
Linux Lite 5.0 Final is now available for download and installation



New Firewall application and Lite Widget status

Author (Read 30061 times)

0 Members and 4 Guests are viewing this topic.

New Firewall application and Lite Widget status
« on: March 07, 2020, 07:51:43 PM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 7561
    Posts
  • Country: nz
  • Reputation: 710
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 3.8 64bit

  • CPU: Intel Xeon Dual CPU's E5645 2.4GHz 12 Cores

  • MEMORY: 16Gb

  • VIDEO CARD: nVidia GeForce GTX 1650

  • Kernel: 4.x
I'm looking into UFW alternatives. I haven't found the UI for GUFW to be very user friendly. This is when I came across Firewalld.
It has a highly configurable interface, it uses iptables, and I found it very intuitive to use.
With point and click settings, we are definitely onto a winner.



On that note, would you folks who use it, or can think for others, find having a Firewall status on Lite Widget handy?
I remember a member suggesting it for Series 5.x but can't remember who it was so it isn't my idea, but I thought was a good one. Some indicative, reassuring message related to Security.



To recap:

- Would having a Firewall status on Lite Widget, be a good idea?
- What do you think of Firewalld replacing GUFW?

For testers:

Code: [Select]
sudo apt-get remove --purge ufw
Code: [Select]
sudo apt-get install firewalld firewall-config
Menu > Settings > Firewall

Resources:

https://firewalld.org/
 


Re: New Firewall application and Lite Widget status
« Reply #1 on: March 08, 2020, 09:35:50 AM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1135
    Posts
  • Country: us
  • Reputation: 186
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 4.8 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D

  • Kernel: 5.x
Firewall status in the widget is a great idea.

As far as GUFW I don't use it at all, or even instruct others how to use it anymore. I think the responses are confusing to new users and configuration is too slow. I do use and teach new LL users how to use UFW from the CLI which is very straightforward and easy to understand. Both Firewalld and GUFW are over thought/designed. A simple tutorial in the help manual for UFW not GUFW would be better. It is by far the simplest and least confusing to use for new LL networking users. A tiny bit of CLI is not bad for new users. This is one case where I feel a GUI application is not more intutive or safe for new users. Most Windows users don't know how to use the firewall properly for extended networking. 

TC   
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: New Firewall application and Lite Widget status
« Reply #2 on: March 08, 2020, 10:38:32 AM »
 

supergamer

  • Forum Regular
  • ***
  • 162
    Posts
  • Country: us
  • Reputation: 27
  • Linux Lite Member

  • Linux Lite: 3.4 64bit

  • CPU: AMD Phenom 565

  • MEMORY: 12Gb

  • VIDEO CARD: 550 ti
I agree about being shown Firewall status. I also agree with the simple GUI is not so simple for new users. What about just a simple ON/OFF button. I am not going to get into the the table settings as that is a thread upon itself but I do think just something that is simple with moderate settings might be a solution. I think if a user needs more from the Firewall then they would learn about it or install a GUI for it.
 

Re: New Firewall application and Lite Widget status
« Reply #3 on: March 08, 2020, 07:25:11 PM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 7561
    Posts
  • Country: nz
  • Reputation: 710
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 3.8 64bit

  • CPU: Intel Xeon Dual CPU's E5645 2.4GHz 12 Cores

  • MEMORY: 16Gb

  • VIDEO CARD: nVidia GeForce GTX 1650

  • Kernel: 4.x
Further to this, should Lite Widget be on the Desktop by default in all releases? I'm thinking of putting it in the 5.0 Rc and seeing what the feedback is like.
 

Re: New Firewall application and Lite Widget status
« Reply #4 on: March 08, 2020, 07:51:15 PM »
 

firenice03

  • Rockin' the FREE World
  • Global Moderator
  • Platinum Level Poster
  • *****
  • 1342
    Posts
  • Country: us
  • Reputation: 245
  • Linux Lite Member

  • Linux Lite: 4.8 64bit

  • CPU: AMD E2//Atom X5//AMD Phenom II X2

  • MEMORY: 4Gb

  • VIDEO CARD: AMD Mullin Radeon R2//Intel//AMD/ATI RS880

  • Kernel: 5.x
Further to this, should Lite Widget be on the Desktop by default in all releases? I'm thinking of putting it in the 5.0 Rc and seeing what the feedback is like.


I like it and use it(the Widget), I've added "Network Strength" to mine for Wi-Fi... Maybe have firewall status - along the same lines of cpu/memory or inline with those.. I like "Updates" being predominant..


I think once firewall is enabled/set correctly its not called upon until needed... I've used firewalld/iptables in RHEL and derivatives but via command line...
A simple GUI (ugh almost Windows esk) with enable/disable -- maybe with the Home/Public/Office pre-configs ... then an advanced section to further tweak.. *Thinking along the line of windows refugees... Sure that would be dependent on the software available...


I'll load the firewalld GUI and take a closer look... :) Kudos Mr. Jerry - always on the look out !!! ;)

LL 4.8 UEFI 64 bit ASUS E402W - AMD E2 (Quad) 1.5Ghz  - 4GB - AMD Mullins Radeon R2
LL 4.8 UEFI 64 bit Test UEFI Kangaroo (Mobile Desktop) - Atom X5-Z8500 1.44Ghz - 2GB - Intel HD Graphics
LL 4.6 64 bit HP 6005- AMD Phenom II X2 - 8GB - AMD/ATI RS880 (HD4200)
LL 3.8 32 bit Dell Inspiron Mini - Atom N270 1.6Ghz - 1GB - Intel Mobile 945GSE Express
RETIRED LL 2.8 64 bit Dell Optiplex 160 (Thin) - Atom 230 1.6Ghz - 4GB-SiS 771/671 PCIE VGA
Running Linux Lite since LL2.2
 

Re: New Firewall application and Lite Widget status
« Reply #5 on: March 09, 2020, 10:58:56 AM »
 

LL-user

  • I come here a lot
  • *****
  • 448
    Posts
  • Country: 00
  • Reputation: 214
  • Linux Lite Member

  • Linux Lite: 2.8 64bit
I'd opt for showing the status of the firewall. But conditional, meaning only showing it if it's turned OFF.
I use the Widget on all machines I install for others, however a customized one.
Last Edit: March 11, 2020, 05:47:17 PM by LL-user
 

Re: New Firewall application and Lite Widget status
« Reply #6 on: March 10, 2020, 07:25:36 AM »
 

trinidad

  • Platinum Level Poster
  • **********
  • 1135
    Posts
  • Country: us
  • Reputation: 186
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 4.8 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D

  • Kernel: 5.x
Apparently I'm a little behind again, though I've been using nftables on Debian 10. Firewalld is about to become the default for the next release of Debian and iptables are being deprecated.

https://ral-arturo.org/2019/10/14/debian-netfilter.html

So Jerry once again your choice seems appropriate and timely.

Considering that the 5.x series will be XFCE perhaps an icon for firewall status; green for on, red for off, in the lower right panel would be better than the widget. Windows defender places an icon in the lower right corner system tray.

TC 
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: New Firewall application and Lite Widget status
« Reply #7 on: March 11, 2020, 01:41:19 PM »
 

torreydale

  • PayPal Supporter
  • Platinum Level Poster
  • *****
  • 1540
    Posts
  • Country: us
  • Reputation: 254
  • * Forum Moderator *

  • Linux Lite: 4.8 64bit

  • CPU: Intel Core i5-5300U (-HT-MCP-)

  • MEMORY: 8Gb

  • VIDEO CARD: Intel Broadwell-U Integrated Graphics

  • Kernel: 4.x
I don't use the widget.  I would not want it as a default.  Just my two cents.
Want to thank me?  Click my [Thank] link.
 

Re: New Firewall application and Lite Widget status
« Reply #8 on: March 12, 2020, 10:59:58 PM »
 

tek10

  • Occasional Poster
  • **
  • 73
    Posts
  • Country: us
  • Reputation: 20
  • Patreon Supporter

  • Linux Lite: 5.0 64bit

  • CPU: Intel Core 2 Duo T9550

  • MEMORY: 4Gb

  • VIDEO CARD: Intel Mobile 4 Series

  • Kernel: 5.x
The widget is easy enough to turn on or off as a user prefers. I use it and the people I've turned on to Lite continue to leave it on their desktops. "On" by default would be fine.

I don't like the firewall status on the widget. As part of setting up a new installation, I make sure the firewall is turned on and leave it that way except in rare instances. I don't need or want that status on my desktop all the time. That said, I modify the widget anyway and can remove the status if included in future versions.
 

Re: New Firewall application and Lite Widget status
« Reply #9 on: March 15, 2020, 09:53:35 PM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 7561
    Posts
  • Country: nz
  • Reputation: 710
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 3.8 64bit

  • CPU: Intel Xeon Dual CPU's E5645 2.4GHz 12 Cores

  • MEMORY: 16Gb

  • VIDEO CARD: nVidia GeForce GTX 1650

  • Kernel: 4.x
wee bump
 

Re: New Firewall application and Lite Widget status
« Reply #10 on: March 16, 2020, 01:26:02 AM »
 

firenice03

  • Rockin' the FREE World
  • Global Moderator
  • Platinum Level Poster
  • *****
  • 1342
    Posts
  • Country: us
  • Reputation: 245
  • Linux Lite Member

  • Linux Lite: 4.8 64bit

  • CPU: AMD E2//Atom X5//AMD Phenom II X2

  • MEMORY: 4Gb

  • VIDEO CARD: AMD Mullin Radeon R2//Intel//AMD/ATI RS880

  • Kernel: 5.x
wee bump

@Jerry

Soooo I had to play a lil..
I like the added FW status - although I usually set it and forget it...

Still using UFW but added a quick n dirty - inline variable ... I do like the status color of yours...
 
Maybe a different perspective??

 


 



LL 4.8 UEFI 64 bit ASUS E402W - AMD E2 (Quad) 1.5Ghz  - 4GB - AMD Mullins Radeon R2
LL 4.8 UEFI 64 bit Test UEFI Kangaroo (Mobile Desktop) - Atom X5-Z8500 1.44Ghz - 2GB - Intel HD Graphics
LL 4.6 64 bit HP 6005- AMD Phenom II X2 - 8GB - AMD/ATI RS880 (HD4200)
LL 3.8 32 bit Dell Inspiron Mini - Atom N270 1.6Ghz - 1GB - Intel Mobile 945GSE Express
RETIRED LL 2.8 64 bit Dell Optiplex 160 (Thin) - Atom 230 1.6Ghz - 4GB-SiS 771/671 PCIE VGA
Running Linux Lite since LL2.2
 

Re: New Firewall application and Lite Widget status
« Reply #11 on: March 16, 2020, 01:38:03 AM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 7561
    Posts
  • Country: nz
  • Reputation: 710
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 3.8 64bit

  • CPU: Intel Xeon Dual CPU's E5645 2.4GHz 12 Cores

  • MEMORY: 16Gb

  • VIDEO CARD: nVidia GeForce GTX 1650

  • Kernel: 4.x
Do you have the code for your work? If so, I'd like to see it please.
 

Re: New Firewall application and Lite Widget status
« Reply #12 on: March 16, 2020, 07:34:49 AM »
 

firenice03

  • Rockin' the FREE World
  • Global Moderator
  • Platinum Level Poster
  • *****
  • 1342
    Posts
  • Country: us
  • Reputation: 245
  • Linux Lite Member

  • Linux Lite: 4.8 64bit

  • CPU: AMD E2//Atom X5//AMD Phenom II X2

  • MEMORY: 4Gb

  • VIDEO CARD: AMD Mullin Radeon R2//Intel//AMD/ATI RS880

  • Kernel: 5.x
I do and most definitely..


I will send it over after work  :)

LL 4.8 UEFI 64 bit ASUS E402W - AMD E2 (Quad) 1.5Ghz  - 4GB - AMD Mullins Radeon R2
LL 4.8 UEFI 64 bit Test UEFI Kangaroo (Mobile Desktop) - Atom X5-Z8500 1.44Ghz - 2GB - Intel HD Graphics
LL 4.6 64 bit HP 6005- AMD Phenom II X2 - 8GB - AMD/ATI RS880 (HD4200)
LL 3.8 32 bit Dell Inspiron Mini - Atom N270 1.6Ghz - 1GB - Intel Mobile 945GSE Express
RETIRED LL 2.8 64 bit Dell Optiplex 160 (Thin) - Atom 230 1.6Ghz - 4GB-SiS 771/671 PCIE VGA
Running Linux Lite since LL2.2
 

Re: New Firewall application and Lite Widget status
« Reply #13 on: March 16, 2020, 08:50:53 PM »
 

bonnevie

  • Occasional Poster
  • **
  • 73
    Posts
  • Country: ca
  • Reputation: 13
  • Linux Lite Member

  • Linux Lite: 4.8 64bit

  • CPU: AMD Sempron

  • MEMORY: 3Gb

  • VIDEO CARD: NVidia GEForce 8200G

  • Kernel: 4.x
I never play with the firewall rules for lack of knowledge. When it's ON, I never look back until the next install. If Jerry makes it easier to tweak and visible in the tray, fine! But it's not something I look for or need, to be honest. I see it as a -plus- for more advanced LL users and I'm OK with that.  It may get me interested into learning more!
1) Compaq-Presario-CQ60-Notebook (2008) AMD-Sempron
2) ThinkPad E540 LL4.8 64 bit Host, VM LL4.8 64-bit guest
Intel i3 QuadCore 12GB RAM
 


Tags:
 


Linux Lite 5.0 Final is now available for download and installation