[opensuse] Firewall-zone question
Hi, I'm configuring new laptops for my daughters. They're almost ready (except for a dvd-problem, see a thread in this list), but I'm uncertain which firewall-zone I have to put the NIC's in. On my own laptops I put all NIC's in internal zone, but is this safe ? I think mostly it will be, except for hotspots and the like. And on my machine I don't have services running (I chould check though ;-) ), but I don't know what my "customers" will need in the future, and where they will be online. What's your opinion ? Regards, Koenraad Lelong AE electronics -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Tuesday 02 April 2013 12:28:27 Koenraad Lelong wrote:
Hi,
I'm configuring new laptops for my daughters. They're almost ready (except for a dvd-problem, see a thread in this list), but I'm uncertain which firewall-zone I have to put the NIC's in. On my own laptops I put all NIC's in internal zone, but is this safe ? I think mostly it will be, except for hotspots and the like. And on my machine I don't have services running (I chould check though ;-) ), but I don't know what my "customers" will need in the future, and where they will be online.
What's your opinion ?
Regards,
Koenraad Lelong AE electronics
I think you should put your NIC in the External Zone if you are directly on the Internet. And in the Internal Zone if you have a hardware router/box/Freebox/Livebox : See : http://en.opensuse.org/SuSEfirewall2#Firewall_Zones Dsant, from France -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Koenraad Lelong wrote:
Hi,
I'm configuring new laptops for my daughters. They're almost ready (except for a dvd-problem, see a thread in this list), but I'm uncertain which firewall-zone I have to put the NIC's in. On my own laptops I put all NIC's in internal zone, but is this safe ? I think mostly it will be, except for hotspots and the like. And on my machine I don't have services running (I chould check though ;-) ), but I don't know what my "customers" will need in the future, and where they will be online.
What's your opinion ? If it connects to the Internet, it's external. So, if you're installing on a stand alone computer, then the NIC is configured as external. If you're building a firewall, the NIC connected to the Internet is external and the one connected to the local network is internal. Normally, it's traffic from the outside world that has to get past the firewall.
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
James Knott wrote:
What's your opinion ? If it connects to the Internet, it's external. So, if you're installing on a stand alone computer, then the NIC is configured as external. If you're building a firewall, the NIC connected to the Internet is external and the one connected to the local network is internal. Normally, it's traffic from the outside world that has to get past the firewall.
One other thing, with notebooks, they may be used part time on a safe local network, where you may choose to not use a firewall and part time elsewhere, where you should. What you can do is have the firewall start up by default and then have a script that checks to see if you're on your home network and then shuts down the firewall. The test can be as simple as pinging a local IP address, such as your router, and then checking the arp cache to see if the appropriate MAC address is there. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (3)
-
Dsant -
James Knott -
Koenraad Lelong