Tell me more ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.
up vote 3 down vote favorite
1

What ways are there of setting up a firewall that can be managed with a GUI that allows you to firewall (filter*) incoming traffic routed to other machines? Can GUFW do it? FireStarter? (or should that be avoided because it is supposedly no longer updated?)

*By filtering, I'm mean the traffic I am setting rules up for is not destined for this computer. It is either from or to other computers on my LAN.

Say, for (a simplified, hypothetical) example:

I have an ethernet connection from my ISP that I have plugged into eth0. It gets an address of 216.228.1.189 and I also have 216.228.15.0/24 routed to me, so I don't have to do any NAT. I have a switch attached to my second ethernet port (eth1). Attached to it are various PCs (that do not necessarily have a host-based firewall on them) that have addresses out of my 216.228.15.0/24 block statically set. How can I use my Ubuntu box (which is doing routing and no NAT) to block incoming connections from eth0 that are being routed to my various PCs and let through just a few specific ports on a per host basis?

Example network layout

share|improve this question
I'm drawing a blank trying to understand the question - can you add to your question an example of what you are trying to achieve? - especially what you mean be "stateful forwarding firewall" – fossfreedom♦ Jun 25 '11 at 20:57
@fossfreedom By forwarding, I'm talking about the case where the computer is routing traffic for other computers. Maybe filtering would be a better word? I would like to be able to, for example, block traffic through the computer that is headed for other computers. – Azendale Jun 25 '11 at 23:13
1  
Gufw is updated actually (even in 12.04), and it might be able to do the job, but your question seems abandoned as @jrg said. – RolandiXor♦ Jan 27 '12 at 17:18
@fossfreedom I did lots of editing, is it more understandable now? – Azendale Feb 27 '12 at 2:28
@Azendale - actually yes - more understandable. Remember to keep an eye on the question and edit it every so often to bump it to the top of the active list. As an alternative, a small bounty might give more encouragement to someone out there who has a speciality/knowledge in this area. Good luck and thanks. – fossfreedom♦ Feb 27 '12 at 9:35

1 Answer

up vote 1 down vote

You might be interested in checking out:

zentyal

From their webpage:

Manage all your computer network services through one single platform. Zentyal is a Network Gateway, Unified Threat Manager, Office Server, Infrastructure Manager, Unified Communications Server or a combination of them. All services based on the same technology and fully integrated. For the first time you can make your network act as one single unit.

Any of the ones listed here should work as well: Wikipedia list of router or firewall distributions

share|improve this answer
I agree, I think you are better off using any of the firewall specific distributions over UFW. Many come with web interfaces, from ipcop to smoothwall. – bodhi.zazen Mar 12 '12 at 4:10

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.