Feature changed by: Marcus Meissner (msmeissn) Feature #305147, revision 12 Title: Wizard mode for Network Card configuration (in YaST) openSUSE-11.2: Evaluation Priority Requester: Neutral Requested by: Michal Zugec (mzugec) Description: (based on "Internet/Intranet with external Router" in suse-beta-e) It seems some users don't know how to setup the SuSEfirewall correctly. Especially, they don't know if they should setup a network card as internal or external device. If a network card is found, YaST should ask for its usage (local network or directly connected to the internet?) - every user should know. With this information the firewall setup can be done in a useful way. See bugzilla https://bugzilla.novell.com/show_bug.cgi?id=67415 Discussion: #1: Federico Lucifredi (flucifredi) (2009-01-26 20:34:01) sounds reasonable. But how many multihomed systems do we find where the user "does not know" ? Besides, the security team's policy seems to be "lock everything, ask questions later", so I am not sure they are willing to mollify the firewall rules (for instance, open up Avahi by default, or other default daemons) on a "local" interface. Asking Marcus for insight. I am not sure on this one. #2: T. J. Brumfield (enderandrew) (2009-06-13 02:33:51) I'd contend that openSUSE and SLES/SLED should be treated differently here. With SLES/SLED, I'd err more on the side of caution and security, where as with openSUSE, I'd err more on the side of making the system user friendly. + #3: Marcus Meissner (msmeissn) (2009-07-16 14:35:43) + What we have investigated, or better Ludwig has investigated, is a + Desktop Applet that can switch Firewall zones. See + http://lizards.opensuse.org/2009/07/10/1453/ + (Since most user machines these days are laptops, who vary between + zones.) + Perhaps this is more what is wanted? -- openSUSE Feature: https://features.opensuse.org/305147