fedora 9 live firewall

[Eric Penrose]

I find it confusing that the settings on fedora 9 live for firewall are such that we tick
the options that we trust such as secure http or http.  If firewall is on anyway, what is
the implication of setting these internet options to trust as opposed to leaving firewall
on, but without these trust settings when going on line?
 
Thanks
Eric
_________________________________________________________________
Are you a PC?  Upload your PC story and show the world 
http://clk.atdmt.com/UKM/go/122465942/direct/01/

[Michael Cronenworth]

-------- Original Message --------
Subject: fedora 9 live firewall
From: Eric Penrose <ericpen(a)hotmail.co.uk&gt;
To: fedora-list(a)redhat.com
Date: 12/02/2008 11:52 AM

>  I find it confusing that the settings on fedora 9 live for firewall
> are 
>  such that we tick the options that we trust such as secure http or 
>  http.  If firewall is on anyway, what is the implication of setting 
>  these internet options to trust as opposed to leaving firewall on, but 
>  without these trust settings when going on line? 
The options you are ticking are for inbound ports. Please read the 
dialogues carefully.

Also, please set your hotmail account to send messages as PLAIN TEXT.

[Rick Stevens]

Eric Penrose wrote:
>  I find it confusing that the settings on fedora 9 live for firewall
> are such that we tick the options that we trust such as secure http or http.  If firewall
> is on anyway, what is the implication of setting these internet options to trust as
> opposed to leaving firewall on, but without these trust settings when going on line?
For a normal users, you don't need to enable anything on the firewall. 
The default settings for the firewall permit established connections
(connections where YOU initiated the connection such as a normal web
browse), so you don't need to enable anything in the firewall.

The firewall settings GUI are for INCOMING connection requests.  Unless
you're running a web server and need to allow the outside world to
initiate connections to your server, you don't need to enable those.
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer                      ricks(a)nerd.com -
- AIM/Skype: therps2        ICQ: 22643734            Yahoo: origrps2 -
-                                                                    -
- If at first you don't succeed, quit. No sense being a damned fool! -
----------------------------------------------------------------------

[Christopher K. Johnson]

Eric Penrose wrote:
>  I find it confusing that the settings on fedora 9 live for firewall 
>  are such that we tick the options that we trust such as secure http or 
>  http.  If firewall is on anyway, what is the implication of setting 
>  these internet options to trust as opposed to leaving firewall on, but 
>  without these trust settings when going on line? 
The options for service
connections to trust do not impact your use of 
such services elsewhere. They control whether the firewall will permit 
other machines to connect to those service ports on YOUR box - the one 
you are setting the firewall options on.  Thus the http option for 
example is relevant only if you wish to run a web server on the box and 
make it available to others on the network.

Examine the file /etc/sysconfig/iptables that is produced by this gui 
tool, and research 'iptables' if you wish to understand what is going on 
in greater detail.

Chris

-- 
   "A society grows great when old men plant trees whose shade they know
   they shall never sit in" - Greek Proverb

[Eric Penrose]

ta
eric

>  Date: Tue, 2 Dec 2008 13:35:36 -0500
>  From: ckjohnson(a)gwi.net
>  To: fedora-list(a)redhat.com
>  Subject: Re: fedora 9 live firewall
>  
>  Eric Penrose wrote:
>  > I find it confusing that the settings on fedora 9 live for firewall 
>  > are such that we tick the options that we trust such as secure http or 
>  > http.  If firewall is on anyway, what is the implication of setting 
>  > these internet options to trust as opposed to leaving firewall on, but 
>  > without these trust settings when going on line?
>  The options for service connections to trust do not impact your use of 
>  such services elsewhere. They control whether the firewall will permit 
>  other machines to connect to those service ports on YOUR box - the one 
>  you are setting the firewall options on.  Thus the http option for 
>  example is relevant only if you wish to run a web server on the box and 
>  make it available to others on the network.
>  
>  Examine the file /etc/sysconfig/iptables that is produced by this gui 
>  tool, and research 'iptables' if you wish to understand what is going on 
>  in greater detail.
>  
>  Chris
>  
>  -- 
>     "A society grows great when old men plant trees whose shade they know
>     they shall never sit in" - Greek Proverb
>  
>  -- 
>  fedora-list mailing list
>  fedora-list(a)redhat.com
>  To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>  Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines 
_________________________________________________________________
Imagine a life without walls.  See the possibilities. 
http://clk.atdmt.com/UKM/go/122465943/direct/01/

[Eric Penrose]

should help
eric

>  Date: Tue, 2 Dec 2008 12:16:28 -0600
>  From: mike(a)cchtml.com
>  To: fedora-list(a)redhat.com
>  Subject: Re: fedora 9 live firewall
>  
>  -------- Original Message --------
>  Subject: fedora 9 live firewall
>  From: Eric Penrose <ericpen(a)hotmail.co.uk&gt;
>  To: fedora-list(a)redhat.com
>  Date: 12/02/2008 11:52 AM
>  
>  > I find it confusing that the settings on fedora 9 live for firewall are 
>  > such that we tick the options that we trust such as secure http or 
>  > http.  If firewall is on anyway, what is the implication of setting 
>  > these internet options to trust as opposed to leaving firewall on, but 
>  > without these trust settings when going on line?
>  
>  The options you are ticking are for inbound ports. Please read the 
>  dialogues carefully.
>  
>  Also, please set your hotmail account to send messages as PLAIN TEXT.
>  
>  -- 
>  fedora-list mailing list
>  fedora-list(a)redhat.com
>  To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>  Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines 
_________________________________________________________________
Get a bird’s eye view of the world with Multimap
http://clk.atdmt.com/GBL/go/115454059/direct/01/

[Eric Penrose]

very clear
many thanks
eric

>  Date: Tue, 2 Dec 2008 10:26:04 -0800
>  From: ricks(a)nerd.com
>  To: fedora-list(a)redhat.com
>  Subject: Re: fedora 9 live firewall
>  
>  Eric Penrose wrote:
>  > I find it confusing that the settings on fedora 9 live for firewall are such that we
> tick the options that we trust such as secure http or http.  If firewall is on anyway,
> what is the implication of setting these internet options to trust as opposed to leaving
> firewall on, but without these trust settings when going on line?
>  
>  For a normal users, you don't need to enable anything on the firewall. 
>  The default settings for the firewall permit established connections
>  (connections where YOU initiated the connection such as a normal web
>  browse), so you don't need to enable anything in the firewall.
>  
>  The firewall settings GUI are for INCOMING connection requests.  Unless
>  you're running a web server and need to allow the outside world to
>  initiate connections to your server, you don't need to enable those.
>  ----------------------------------------------------------------------
>  - Rick Stevens, Systems Engineer                      ricks(a)nerd.com -
>  - AIM/Skype: therps2        ICQ: 22643734            Yahoo: origrps2 -
>  -                                                                    -
>  - If at first you don't succeed, quit. No sense being a damned fool! -
>  ----------------------------------------------------------------------
>  
>  -- 
>  fedora-list mailing list
>  fedora-list(a)redhat.com
>  To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>  Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines 
_________________________________________________________________
Get a bird’s eye view of the world with Multimap
http://clk.atdmt.com/GBL/go/115454059/direct/01/