Puppy Linux Discussion Forum

rcrsn51 · Posted: Mon 20 Feb 2017, 19:12 Post subject:

Thanks. I have added a post-install script to the PET that removes any existing firewall. That will make PFM build a new basic firewall on the first run.

keniv · Joined: 06 Oct 2009 Posts: 494 Location: Scotland

I think thats a good idea. I did not think to shut off the firewall before I installed v1.5. I'm wondering if I should install v1.6 in 412 lite and 410 smp. v1.5 works with these two. I'd appreciate your advice.

Ken.b

rcrsn51 · Posted: Mon 20 Feb 2017, 19:28 Post subject:

That's up to you. The major changes in v1.6 are with detection of open ports and building the firewall for trusted networks.

greengeek · Posted: Tue 21 Feb 2017, 02:43 Post subject:

keniv · Joined: 06 Oct 2009 Posts: 494 Location: Scotland

@greengeek
Your output from iptables -L -n is very like mine. I can't check just now as I don't have access to my old laptop and am replying on a phone.
I'm no expert on this stuff. I asked on another thead how I could tell if the firewall was running. This was what was suggested. I think it displays your set of rules. I think if the firewall is not running they would not be displayed.

@rcrsn51
I think I'll stick with v1.5 for 412 lite and 410 as their not on a local network .

Ken.

rcrsn51 · Posted: Tue 21 Feb 2017, 12:07 Post subject:

Version 1.7 is posted above. It has a single-window user interface.

keniv · Joined: 06 Oct 2009 Posts: 494 Location: Scotland

Now using v1.7 in all four pups. Working in all of them.

Ken.

rcrsn51 · Posted: Tue 21 Feb 2017, 13:16 Post subject:

Excellent. Thanks for testing.

rcrsn51 · Posted: Tue 21 Feb 2017, 16:23 Post subject:

Version 1.8 posted above.

slavvo67 · Joined: 12 Oct 2012 Posts: 1570 Location: The other Mr. 305

Installed in Quirky Xerus64 (actually RU Xerus but interchangeable from my standpoint). Seems to work except for the install tray applet.

rcrsn51 · Posted: Tue 21 Feb 2017, 19:32 Post subject:

slavvo67 · Joined: 12 Oct 2012 Posts: 1570 Location: The other Mr. 305

The tray applet seems to be working --- Thank you! Thank you for the Peasyport tip. I'll have to test a little....

I have a suggestion but I'm not sure if it's practical or how difficult to accomplish. It would be nice to have a box that says Open Port [ _ _ ] to simplify opening a specific port #. Then, you would probably need a close port X or close all ports. Just a thought but it's nice, either way!

rcrsn51 · Posted: Tue 21 Feb 2017, 20:28 Post subject:

slavvo67 · Joined: 12 Oct 2012 Posts: 1570 Location: The other Mr. 305

When I temporarily turn off the firewall, only ports 139 and 445 reflect as being opened using Peasyscan with a different computer.

Actually, the above might be a Peasyport issue. When I removed the firewall, Peasyport only reported back the ports above as being opened.

Practical value is say you're using Python Simple Server. No?

Update: I see what you're doing. So you're using port 24 for trusted LAN and that can be used with Python Simple Server as well as any. So, only question is can you turn off the trusted lan (port 24) without shutting down the firewall and restarting?

Also, still checking on the Peasyport discrepancy. I may have had the firewall up on the computer using Peasyport to scan. Still, not sure why it would show 2 open ports when that computer would be locked down..... I'll let you know what I find...