|
48.
|
|
|
<application>Uncomplicated Firewall (UFW)</application> is the standard firewall configuration program in Ubuntu. It is a command line program. Most users will prefer to use <application>Gufw</application>, which is a graphical program to configure <application>UFW</application>.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
keeping-safe/C/keeping-safe.xml:107(para)
|
|
49.
|
|
|
Advanced users may wish to use <application>UFW</application> directly in the terminal. See the <ulink type="help" url="man:ufw">UFW manual</ulink> or the <ulink url="https://help.ubuntu.com/community/UFW">Community Documentation page on <application>UFW</application></ulink> for more information. Alternatively, you can use <application>iptables</application> - see the <ulink type="help" url="man:iptables">iptables manual</ulink>.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
keeping-safe/C/keeping-safe.xml:108(para)
|
|
54.
|
|
|
To start <application>Gufw</application>, choose <menuchoice><guimenu>System</guimenu><guimenuitem>Administration</guimenuitem><guimenuitem>Firewall configuration</guimenuitem></menuchoice>.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
keeping-safe/C/keeping-safe.xml:117(para)
|
|
55.
|
|
|
To enable the firewall, simply check the box next to <guibutton>Enabled</guibutton> under <quote>Actual Status</quote>.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
keeping-safe/C/keeping-safe.xml:120(para)
|
|
56.
|
|
|
The default configuration is to deny connections. This means that a program attempting to connect to your computer will be denied. Certain programs or services which use the internet may require you to add an exception.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
keeping-safe/C/keeping-safe.xml:123(para)
|
|
59.
|
|
|
You can choose from <guibutton>Preconfigured</guibutton> options for common programs and services, or you can manually add port exceptions in the <guibutton>Simple</guibutton> or <guibutton>Advanced</guibutton> tabs.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
keeping-safe/C/keeping-safe.xml:130(para)
|
|
60.
|
|
|
To find out what type of exception a particular program requires, you should consult the help for that program.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
keeping-safe/C/keeping-safe.xml:133(para)
|
|
61.
|
|
|
For a graphical walkthrough of basic Gufw usage, see the <ulink url="https://help.ubuntu.com/community/Gufw">Ubuntu Community Documentation page on <application>Gufw</application></ulink>.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
keeping-safe/C/keeping-safe.xml:136(para)
|
|
63.
|
|
|
To test the firewall it is best to scan it from a second computer. A popular application to use is called <application>nmap</application>.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
keeping-safe/C/keeping-safe.xml:141(para)
|
|
71.
|
|
|
Actual monitoring of your network traffic can be done with either <application>Wireshark</application> or <application>Snort</application>. <application>Wireshark</application> can analyze network packets and <application>Snort</application> is used in Network Intrusion Detection Systems (NIDS) and will notify you of unusual traffic.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
keeping-safe/C/keeping-safe.xml:157(para)
|