preferred firewall on debian buster

If none of the more specific forums is the right place to ask

preferred firewall on debian buster

Postby vryni » 2019-10-06 12:19

When i installed debian 10 it came to my attention that
it comes with apparmor pre-installed.

Searching for "things to do after installing Debian 10"
i found this guide https://www.linuxtechi.com/things-to-do ... debian-10/
advocating the installation of ufw

Previously using Debian 9 (which came with ufw preinstalled by default)
i used to make some minimal, very basic changes to /etc/ufw/before.rules
telling myself that i was safe behind a firell
I am totally clueless with Apparmor

Should i invest time in learning to use Apparmor ?
or
should i install UFW and if so - do i have to uninstall Apparmor first ?
vryni
 
Posts: 23
Joined: 2017-06-16 05:12

Re: preferred firewall on debian buster

Postby p.H » 2019-10-06 13:22

vryni wrote:Previously using Debian 9 (which came with ufw preinstalled by default)

AFAIK Debian 9 did not come with ufw preinstalled by default. Maybe some desktop environment did.

Apparmor is not a firewall, at least not in the common "packet filter" sense like iptables or nftables. It is a security framework which allows to restrict programs' capabilities (including network access).
p.H
 
Posts: 1160
Joined: 2017-09-17 07:12


Re: preferred firewall on debian buster

Postby Head_on_a_Stick » 2019-10-07 08:00

vryni wrote:i used to make some minimal, very basic changes to /etc/ufw/before.rules
telling myself that i was safe behind a firell

Most desktop users don't really need a firewall and running one will not "protect" you in any meaningful way.

EDIT: apparmor does provide significant protections for the average desktop user though, which is why Debian has enabled it by default.
Don't break DebianHow to report bugs

SharpBang GNU/Linux — a pre-configured Openbox/Tint2 desktop running on Debian stable
User avatar
Head_on_a_Stick
 
Posts: 10613
Joined: 2014-06-01 17:46
Location: /dev/chair


Return to General Questions

Who is online

Users browsing this forum: No registered users and 24 guests

fashionable