Tag firewall

How To Enable Dynamic Firewall On Fedora 16

The official symbol of the Linux distribution ...

Image via Wikipedia

The developers behind a Linux distribution known as Fedora have been working on a new type of firewall system known as Dynamic Firewall.  Since Fedora 15, users could install Dynamic Firewall.  It’s kind of a disappointment for me to see the latest Fedora 16 isn’t yet shipped with the Dynamic Firewall.  Nonetheless, as how Fedora 15 was, users can still install Dynamic Firewall with Fedora 16.

For your information, Fedora 16 isn’t enabling any firewall by default.  Yes, Fedora 16 is still shipping with the traditional IPTables firewall system.  The question is, why users want to use Fedora’s Dynamic Firewall over the traditional IPTables type of firewall?  It’s because Dynamic Firewall is somewhat smarter.

I’d made a video which shows you how to disable the traditional firewall, enable the Dynamic Firewall, and how to revert back to the traditional firewall from Dynamic Firewall.  The video also points out why and how Dynamic Firewall is smarter than the traditional firewall (i.e., IPTables).  You can check out the video right after the break.

Product Review: Norton Internet Security 2012 (Video)

It’s this time of the year that new computer security products make themselves known.  It’s this time of the year that I like to do product reviews on various computer security products.  Well, within this post, I like to post a video that I had created for the purpose of reviewing Symantec’s Norton Internet Security 2012.  So, I hope you’ll enjoy the “Product Review:  Norton Internet Security 2012″ video right after the break.

Questions:

  1. Do you think Norton Internet Security 2011 was a good product?
  2. Do you think that you’re going to try out Norton Internet Security 2012?

Please leave your answers in the comment section below this post.  Thank you!

IPV6 Won’t Use NAT And Other Private Features, Requiring Firewall To Protect IPV6 IP Addresses From Prying Eyes

IPV6 was all the rage couple months ago, but we haven’t heard much about it now.  Nonetheless, don’t think for a second that IPV6 won’t come!  I think it will come slowly, but it will be here eventually.  Noticeably, people won’t be able to use IPV6 if their ISPs aren’t yet ready!

Fortunately, responsible ISPs will definitely roll out newer firmwares to update customers’ routers/gateways so IPV6 will be supported.  In the worse case scenario, customers may have to demand for newer routers/gateways from their ISPs before IPV6 will be enabled in their home/office networks.

Not only the routers/gateways have to be IPV6 enabled, each user’s computer must be configured to support IPV6.  I’d read somewhere that IPV6 will expose all internal devices to the Internet, because IPV6′s IP distribution is more tied to the world than not (i.e., there are countless more IP addresses from IPV6 than IPV4).  To put this in a clearer context for some people, IPV6 forgoes NAT and other private features.  NAT stands for Network Address Translation where it acts as a barrier and correlation between public IP addresses and private network IP addresses (e.g., 192.168.x.x).  This is why people definitely have to learn how to enabling firewall for IPV6 so their devices’ IP addresses won’t be exposed.

Customers who are relying on premium security suites from well known brands might not have to do much for them to have a functioning IPV6 firewall, because newer updates to their security suite software will come with active IPV6 firewall, I guess.  Linux users on the other hand might have to get down and dirty.  I’m not sure if Linux users can clone IPV4′s iptables to protect their IPV6′s network.  The user space application program for IPV6′s Linux kernel firewall has to be ip6tables.  I’m definitely going to look more into how to enable firewall for IPV6 in Linux.

Update:  Apparently, I don’t think it’s hard to enable IPV6 firewall in certain Linux distributions such as Ubuntu 11.04!  As long Uncomplicated Firewall is enabled in such Linux distributions and the users know how to use UFW, then they can easily configure UFW to protect their devices on IPV6 network.  UFW has a graphical version which is known as Gufw, and so it should be a lot easier to use the Gufw than the command line version UFW.  For your information UFW/Gufw is very easy to use, because I’ve tested UFW/Gufw on Ubuntu 11.04.  I’ve found UFW/Gufw to be simple and more intuitive than most Linux’s frontend programs for iptables/ip6tables.

Click here to go to the screenshot’s source!

Follow

Get every new post delivered to your Inbox.

Join 135 other followers