<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div id="yiv430492350"><div><div style="color:#000;background-color:#fff;font-family:times new roman, new york, times, serif;font-size:12pt;"><div id="yiv430492350"><div id="yiv430492350yui_3_2_0_21_133415239028057"><div id="yiv430492350yui_3_2_0_21_133415239028058" class="yiv430492350yui_3_2_0_21_133415239028048" style="color:#000;background-color:#fff;font-family:times new roman, new york, times, serif;font-size:12pt;"><div id="yiv430492350"><div id="yiv430492350yui_3_2_0_17_133139504708855"><div id="yiv430492350yui_3_2_0_17_133139504708856" class="yiv430492350yui_3_2_0_17_133139504708848 yiv430492350yui_3_2_0_21_133415239028050" style="color:#000;background-color:#fff;font-family:times new roman, new york, times, serif;font-size:12pt;"><div id="yiv430492350"><div id="yiv430492350yui_3_2_0_17_133130564576753"><div
id="yiv430492350yui_3_2_0_17_133130564576754" class="yiv430492350yui_3_2_0_17_133130564576748 yiv430492350yui_3_2_0_17_133139504708850 yiv430492350yui_3_2_0_21_133415239028052" style="color:#000;background-color:#fff;font-family:times new roman, new york, times, serif;font-size:12pt;"><div id="yiv430492350yui_3_2_0_17_133126094846840">There's been some discussion on this mailing list about application-firewalls, and I wanted to say a word about Ubuntu's inability to filter internet connections at the application-level.<span><br></span><span id="yiv430492350yui_3_2_0_17_133139504708868"></span><span id="yiv430492350yui_3_2_0_21_133415239028074"></span><span></span></div><div id="yiv430492350yui_3_2_0_17_1331260948468103">I work as a freelance journalist. On many occasions I recommend the use of Tor to sources in middle eastern and southeast Asian countries. For their own safety, they need an anonymous way to upload things to the
internet and in general to communicate online.</div><div id="yiv430492350yui_3_2_0_17_1331260948468170"><br></div><div id="yiv430492350yui_3_2_0_17_1331260948468171">I am a strong proponent of open-source software and am a fan of Debian and Ubuntu; however, I caution my sources against running the Tor client on Ubuntu because of Ubuntu's lack of support for application-firewalls. I often advise Microsoft Windows be used because
application-firewall software exists that allows users to create a "Tor Profile": a firewall-settings profile that not only filters DNS lookups but also only allows outbound connections from the Tor client. All other applications are blocked from connecting to the internet while this profile is active.<br></div><div id="yiv430492350yui_3_2_0_17_1331260948468946"><br></div><div id="yiv430492350yui_3_2_0_17_1331260948468947">When needing to use Tor, the source will activate the firewall software's user-created "Tor Profile" and then start a Tor browsing session. When finished browsing, the source will close Tor and change the firewall settings from the "Tor Profile" back to the default profile which in general allows all applications to connect to the internet. This setup ensures that no other applications "accidentally" connect to the internet during an active Tor session and "reveal" the source's true IP address. </div><div
id="yiv430492350yui_3_2_0_17_1331260948468524"><br></div><div id="yiv430492350yui_3_2_0_17_1331260948468525">I'm sharing this because I
hope to see Ubuntu gain this valuable feature-set. There are many advantages to being able to filter at the application-level. It's a feature sadly missing from Ubuntu. Hopefully it's something Ubuntu developers will address in the near future.</div><br>Sincerely,<br><br>Paul Campbell<br><br><br></div></div></div></div></div></div></div></div></div></div></div></div></div></body></html>