Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

Firewall for Debian 11 desktop

New to Debian (Or Linux in general)? Ask your questions here!
Post Reply
Message
Author
vryni
Posts: 58
Joined: 2017-06-16 05:12
Been thanked: 1 time

Firewall for Debian 11 desktop

#1 Post by vryni »

I've just installed Debian 11

Is there a default firewall for this version ?

Is it the best option ?

User avatar
FreewheelinFrank
Global Moderator
Global Moderator
Posts: 2065
Joined: 2010-06-07 16:59
Has thanked: 38 times
Been thanked: 221 times

Re: Firewall for Debian 11 desktop

#2 Post by FreewheelinFrank »


User avatar
Hallvor
Global Moderator
Global Moderator
Posts: 2020
Joined: 2009-04-16 18:35
Location: Kristiansand, Norway
Has thanked: 138 times
Been thanked: 204 times

Re: Firewall for Debian 11 desktop

#3 Post by Hallvor »

You can see if any service is listening by typing (as root):

Code: Select all

netstat -tulpn
in a terminal.

If nothing is listening for external connections, a firewall is pointless.

If you would like to block access to running services, or would like peace of mind in case you inadvertently install an application with a web server, this may be of help: viewtopic.php?f=16&t=143876
[HowTo] Install and configure Debian bookworm
Debian 12 | KDE Plasma | ThinkPad T440s | 4 × Intel® Core™ i7-4600U CPU @ 2.10GHz | 12 GiB RAM | Mesa Intel® HD Graphics 4400 | 1 TB SSD

User avatar
Hund
Posts: 7
Joined: 2021-10-28 18:46
Location: Sweden

Re: Firewall for Debian 11 desktop

#4 Post by Hund »

I would recommend you checking out Gufw. They market themselves as "one of the easiest firewalls in the world".
Collect memories, not things.

User avatar
ticojohn
Posts: 1284
Joined: 2009-08-29 18:10
Location: Costa Rica
Has thanked: 21 times
Been thanked: 44 times

Re: Firewall for Debian 11 desktop

#5 Post by ticojohn »

Hund wrote: 2021-12-04 13:51 I would recommend you checking out Gufw. They market themselves as "one of the easiest firewalls in the world".
The link shown leads to the Gufw installer for Ubuntu. As gufw is in the Debian repository it would be best to install from Debian. Doing so will ensure that there aren't any surprises such as dependency issues. Always best to stick with Debian.
I am not irrational, I'm just quantum probabilistic.

Bulkley
Posts: 6382
Joined: 2006-02-11 18:35
Has thanked: 2 times
Been thanked: 39 times

Re: Firewall for Debian 11 desktop

#6 Post by Bulkley »

vryni wrote: 2021-12-02 14:09 Is there a default firewall for this version ?
The closest Debian gets to a default used to be IPtables. This has been replaced by NFtables.
It is recommended to run firewalld . . .
Is it the best option ?
That depends upon you and your needs. Several of the firewall GUIs are simply front ends for IPtables or NFtables.

Note that the router/modem you use to access the Internet may have a built in firewall. I set mine to the most secure setting and have never suffered for it.

User avatar
Hund
Posts: 7
Joined: 2021-10-28 18:46
Location: Sweden

Re: Firewall for Debian 11 desktop

#7 Post by Hund »

ticojohn wrote: 2021-12-04 19:39
Hund wrote: 2021-12-04 13:51 I would recommend you checking out Gufw. They market themselves as "one of the easiest firewalls in the world".
The link shown leads to the Gufw installer for Ubuntu. As gufw is in the Debian repository it would be best to install from Debian. Doing so will ensure that there aren't any surprises such as dependency issues. Always best to stick with Debian.
I shared a link to their website.
Collect memories, not things.

User avatar
ticojohn
Posts: 1284
Joined: 2009-08-29 18:10
Location: Costa Rica
Has thanked: 21 times
Been thanked: 44 times

Re: Firewall for Debian 11 desktop

#8 Post by ticojohn »

Hund wrote: 2021-12-07 11:13
ticojohn wrote: 2021-12-04 19:39
Hund wrote: 2021-12-04 13:51 I would recommend you checking out Gufw. They market themselves as "one of the easiest firewalls in the world".
The link shown leads to the Gufw installer for Ubuntu. As gufw is in the Debian repository it would be best to install from Debian. Doing so will ensure that there aren't any surprises such as dependency issues. Always best to stick with Debian.
I shared a link to their website.
Thanks @Hund. I understand. I was just commenting on the link to Ubuntu, concerned that people might download Gufw from that site instead of using the Debian repository.
I am not irrational, I'm just quantum probabilistic.

Post Reply