Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I just recently made the switch from Windows to Ubuntu, and I'm just a little paranoid when it comes to security measures.

I've looked around and from what I've read, security is not as big a concern as on a Windows OS, but I just want to make sure I'm somewhat covered.

Currently, I have installed ClamTK anti-virus and gufw (and enabled it once).

So basically I have three questions :

  1. Aside from those apps, updating regularly, and downloading from trusted sources only, should I be taking any other precautions?
  2. Must I do anything more with gufw other than checking enabled or are the default settings (incoming : deny, outgoing : allow) sufficient?
  3. Do I have to manually turn on gufw everytime and enable it (and keep it open)? Everytime I open it the enabled checkbox is unchecked.

EDIT: When I open gufw, I must unlock and enter my password, however the checkbox is now checked. Must I always open gufw did I simply need to enable it once?

Thank you.

share|improve this question
1  
You're a typical paranoid ex-windows user :) installing anti-viruses and firewalls ... you don't really need that stuff in Ubuntu, as long as you are at least an averagely experienced. Great job on switching to Ubuntu, by the way, I'm sure later down the road you'll understand you don't really need those apps. –  Richard Rodriguez Sep 14 '11 at 22:50

1 Answer 1

up vote 8 down vote accepted

Good questions.

Aside from those apps, updating regularly, and downloading from trusted sources only, should I be taking any other precautions?

Not really. Don't run random commands, especially those mentioning sudo, that people might give you on the web, unless it's a trustworthy source or you know what it does.

Beyond that I think the main thing you want to be careful with is web security, eg not typing your facebook password into random other web sites.

Update rigved wisely suggests installing security-oriented browser plugins: Adblock Plus, HTTPS Everywhere, Noscript and WOT. (rigved also says Tor, but I'm not so sure about that, because Tor has benefits but also security risks.)

Must I do anything more with gufw other than checking enabled or are the default settings (incoming : deny, outgoing : allow) sufficient?

That should be fine.

Do I have to manually turn on gufw everytime and enable it (and keep it open)? Everytime I open it the enabled checkbox is unchecked.

It actually does stay enabled after you quit, but bug 850468 makes it looks like it's not enabled, until you authenticate.

share|improve this answer
    
Thanks for the quick answers. Also I have a correction to make. After looking back at gufw, when I open it, it seems i must press unlock and enter my password, but the checkbox is now checked. Is this normal behaviour? And should I be keeping the application open, or can I close once it's enabled? –  Shane Sep 14 '11 at 22:32
    
@Shane This is normal behaviour. You can close once enabled. Firewall will still work. –  Wojciech Sep 14 '11 at 22:38
    
You need to enter your password to become root to modify the configuration. You don't need to leave the app running: it is just a configuration tool and the actual firewall lives in the kernel, and is set up by a script at boot time. You can verify this by running sudo iptables -L from a terminal. –  poolie Sep 14 '11 at 22:38
    
OK, I see: the firewall is apparently off in gufw until you authenticate (although it's actually on all the time.) –  poolie Sep 14 '11 at 22:40
1  
Also, in terms of Web sercurity, using the following extensions in Firefox helps: Adblock Plus, HTTPS Everywhere, Noscript, Tor and WOT –  rigved Sep 15 '11 at 4:08

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.