Ubuntu QA:
BlogBrainstormPackage status
Log in
Ubuntu QA
The Ubuntu community has contributed 21598 ideas, 132636 comments, 2607385 votes
Idea sandbox Idea sandbox
Popular ideas Popular ideas
Ideas in development Ideas in development
Implemented ideas Implemented ideas
Idea #18301: UFW Firewall Service Setup should be simpler

Written by lutimdale the 25 Feb 09 at 16:32. Category: Security. Related project: Nothing/Others. Status: New
Rationale
Currently, these are the services that are provided in UFW's preconfigured section.
- ftp
- imap
- pop3
- smtp
- nfs
- ssh
- telnet
- vnc
- netbios-ssn (partially for samba)
- ipp




Tags: UFW

8
votes
up equal down
Solution #1: Include more common services such as samba
Written by lutimdale the 25 Feb 09 at 16:32.
Specifically, there should be a samba or file sharing service defined, where all the service ports are defined. Instead on a portion is defined under netbios-ssn (port 139).

Extract from this website (http://troy.jdmz.net/samba/fw/)

Ports, Protocols, and Daemons
In the /etc/services file you will find a few lines that refer to Samba services:
netbios-ns 137/tcp # NetBIOS Name Service
netbios-ns 137/udp
netbios-dgm 138/tcp # NetBIOS Datagram Service
netbios-dgm 138/udp
netbios-ssn 139/tcp # NetBIOS Session Service
netbios-ssn 139/udp
microsoft-ds 445/tcp # Microsoft Directory Service
microsoft-ds 445/udp

The picture this provides is somewhat deceiving, since the half of those lines could be removed and condensed to:
netbios-ns 137/udp # NetBIOS Name Service
netbios-dgm 138/udp # NetBIOS Datagram Service
netbios-ssn 139/tcp # NetBIOS Session Service
microsoft-ds 445/tcp # Microsoft Directory Service
6
votes
up equal down
Solution #2: Rules should be viewable by service
Written by lutimdale the 25 Feb 09 at 16:34.
I as a user should not have to remember which ports are relevant to samba. The rules list should be displayed by service if that is how it was entered. At the very least a rule name should be added.

Propose your solution

Attachments
No attachments.


Duplicates


Comments
danielsan474 wrote on the 9 Mar 09 at 07:32
Improve integration of gufw with the system and add more "filters" templates by-apps

jhansonxi wrote on the 5 Jan 11 at 22:25
This problem is being worked on:
http://jhansonxi.blogspot.com/2010/10/ufw-application-profiles.html
https://bugs.edge.launchpad.net/ubuntu/+source/ufw/+bug/659619


Post your comment