opensnitch and ufw

stekte

I've been using opensnitch for a while on solus. Earlier i gave a go to ufw on another
system (slackware). Opensnitch by default blocks outgoing but have no options for
incoming traffic. Ufw blocks incoming by default and allows outgoing. This is what
started to confuse me. which is better to block incoming or outgoing for a secure system?
Can i use both in a system at the same time one to block in and the other to block out?

brent

stekte
those are two different tools I believe.
My personal opinion is ufw has the more sensible/effective default since nothing comes in. I've usedufw for years with no incident.

Axios

stekte You can use both
Opensnitch is how I noticed snapd was phoning home and I dont use snaps so I deleted it.
Heck even gnome calc tried talking to net but it does for some currency feature I dont use that so I just blocked it.
Just gives you piece of mind on whats leaving computer
If you want control outgoing ect use opensnitch its more interactive and when something tries to access internet
you will know it for sure and if your ok with it allow it and go on.

Some people think it to busy will be abit when you first put it on but when you get things way you like them
its not a issue.
I havent totally explored the linux ver yet.

Sorry to answer your question to me its equally both ways.

stekte

I am aware of the differences between the two tools. My question is what is more important to
block in or out.

brent

stekte . My question is what is more important to
block in or out.

and I answered your question with my opinion: better to keep the creepy crawlies out (block incoming).

I look forward to more opinions. I have no doubt they will be varied 🙂.

stekte

brent
thank you for your reply.
Axios
Thank you
If i can i'll write some rules for ufw .I am going to use opensnitch for what wants out and use that
info to block it with ufw .

brent

Axios gnome calc? I get the feeling lots of stuff I had no idea that call out on a connection...is probably much more than I think.

@stekte for years I've entertained makingiptables/ufw rules then I start to do it and give up. it would be a good habit to learn

Lucien_Lachance

stekte do share your rules if you can

stekte

brent

brent t would be a good habit to learn <

Yes definetly habit , good ? ,hm...

brent

stekte Yes definetly habit , good ? ,hm...

always wanted to be one of those users who was the 'master of their domain' and made rules for necessary programs and had multiple ports shut down, etc. Someday.

stekte

Lucien_Lachance
I'll do when tested and they are 100% usable without other problems

BuzzPCSOS

Tried OpenSnitch on Plasma but it just opens and then closes directly with only the icon in the taskbar showing up for a moment. I wonder if that is a Plasma thing or something that I have done 🤔
UFW is my default firewall at the moment but it is always good to try new.

Axios

BuzzPCSOS Try rebooting was issue early on but let them know if it continues
he did a fix for it.

stekte

BuzzPCSOS
Maybe these two don't go together. Haven't try yet

TraceyC

Please keep the discussion focused on @stekte's issue of setting up a firewall. The Support forum is meant to resolve individual issues, one per topic. Thanks for understanding, everyone.

BuzzPCSOS please don't hijack someone else's support thread with a different issue (even if it's about the same software).. There's now confusion in this thread because there are two different issues being discussed. Please move that to a new thread. Thanks.

BuzzPCSOS

Axios let them know if it continues

I will try it on another Plasma PC just to make sure.
Lol, A quick reboot was my first response when OpenSnitch didn't work.

BuzzPCSOS

Axios Doesn’t work on another Plasma PC either. Tried running sudo opensnitch-ui from terminal and it reports that python3-notify2 is missing.

Axios

You can do firewall rules right from opensnitch

TraceyC

I really recommend reading up on good firewall practices for anyone before changing firewall rules. I don't have one offhand, but there are reputable guides out there.

Axios

BuzzPCSOS That appears to be for desktop notifications
I saw somewhere somebody complaining about notifications on kde not sure if it would be related
tho.
Would not think that would be a opensnitch issue more of a system issue.
When I installed it there was a bunch of python stuff it installed extra.

I would file a bug it is a new package so we prob going have a few hiccups (I dont have Plasma)