Desktop linux firewalled?

[mcse37]

Do desktop linux distros come firewalled out of the box?  If not, is there anything I need to do to protect my system?

Thanks,

Bob

[Texstar]

If you are behind a router such as linksys then it already has a built in firewall. If not you can configure one on PCLinuxOS 2010 by clicking the Firewall icon on the desktop.

[mcse37]

Thanks for your response.  I'm running PCLinux 2010 Gnome, but I don't have a desktop icon named "Firewall". 

A search of the phrase "Firewall" in Synaptic shows that the package "IPtables" is installed by default.  Is it necessary for me to configure this program to protect my system?

Thanks,

Bob

[Rudge]

Thanks for your response.  I'm running PCLinux 2010 Gnome, but I don't have a desktop icon named "Firewall". 

A search of the phrase "Firewall" in Synaptic shows that the package "IPtables" is installed by default.  Is it necessary for me to configure this program to protect my system?

Thanks,

Bob

What are you trying to protect it from?

[jwt873]

There's a utility to configure a firewall in the PCLOS Control Center  (The control center icon shows a crossed scrwedriver/wrench in a circle)

Click on 'Security' then 'Set up your personal Firewall'.

[mcse37]

Thanks for your response.  I'm surprised that the firewall isn't enabled by default.  Whats the reasoning behind this?  When I'm at home I'm behind a router, but say if I take my laptop to a Starbucks I'd like to make sure my system isn't compromised.

Thanks,

Bob

[parnote]

Compromised by what, Bob?

parnote

[Texstar]

One release we didn't have a firewall enabled and people complained.

The next release we enabled a firewall and people complained they could not connect to various services such as bittorrent, samba, nfs etc...

The next release we enabled a firewall and opened some common ports and people complained about open ports they never used.

The next release we said to hell with it configure the thing yourself here is the button.

[Bald Brick]

LOL. 

[Old-Polack]

The next release we said to hell with it configure the thing yourself here is the button.

And very considerate of you, leaving a button. I needed one for my shirt. Thanks Tex! 

[mcse37]

I don't have a specific concern that needs to be addressed by a firewall, I'm just wondering if what I don't know could hurt me.  Windows 7 comes firewalled out of the box, I assumed that Linux would be, too.

Thanks to all that responded.  Great distro.


Bob

[TerryH]

One release we didn't have a firewall enabled and people complained.

The next release we enabled a firewall and people complained they could not connect to various services such as bittorrent, samba, nfs etc...

The next release we enabled a firewall and opened some common ports and people complained about open ports they never used.

The next release we said to hell with it configure the thing yourself here is the button.

Yep, sometimes you just can't win.

The button worked great. Thanks.

[parnote]

I don't have a specific concern that needs to be addressed by a firewall, I'm just wondering if what I don't know could hurt me.  Windows 7 comes firewalled out of the box, I assumed that Linux would be, too.

Thanks to all that responded.  Great distro.


Bob

Bob,

We can sum that up in 3 words: Linux ain't Windows.

Nearly all the viruses out there are written for Windows. Windows, by its very nature, is very insecure and vulnerable. Linux, on the other hand, is typically very secure. It's built that way, and will stay that way, provided you don't do foolish things like connect to the 'net when logged in as the root user.

parnote

[zz_cro]

First: firewalls do not protect against viruses, they protect against intrusions.
Second: Even root user need to connect to the net at the times.
Third: Just because eventual intruder can cause limited damage to the system without root privileges it doesn't mean that it can't steal information or at least mess up the system.

I think firewall is as important protection in linux as it is in windows. Being behind your router firewall is not as safe as being behind both your router firewall and your software firewall (which adds another layer of protection. Anti virus might be altogether different story. Even though majority of the viruses are written for windows that doesn't mean that there is no linux viruses possible. That alone might make sense for some people to search for protection from that side too.

[Old-Polack]

Second: Even root user need to connect to the net at the times.

And what instance would that be? I've never yet encountered that instance, during the last 11 years, and would really like to know.