helloSystem / Utilities

Utilities written in PyQt5, meant for use with helloSystem
BSD 2-Clause "Simplified" License
28 stars 29 forks source link

Create Security app #99

Open probonopd opened 3 years ago

probonopd commented 3 years ago

One tab should be for Firewall. It should manage:

sysrc firewall_enable="YES"
sysrc firewall_quiet="YES"
sysrc firewall_type="workstation"
sysrc firewall_logdeny="YES"
sysrc firewall_myservices="80/tcp 443/tcp 22/tcp 5353/udp"
sysrc firewall_allowservices="any"

Thanks RoboNuggie for the no-nonsense explanation https://twitter.com/RoboNuggie/status/1461792379925635077

probonopd commented 3 years ago

5353/udp for Zeroconf mDNS

May need more ports open for similar services: https://www.icir.org/gregor/tools/autoconf-protocols.html

Check /var/log/security for DENY messages to see what gets blocked by the firewall.

probonopd commented 3 years ago

Even with 5353/udp 65500/udp Zeroconf does not work, the machine does not see other devices on the network. What am I missing?

probonopd commented 3 years ago

Disabling the Firewall for now until this can be resolved.