User-Friendly Firewalling [Re: ZeroConf in Ubuntu Edgy]

[Patrick McFarland]

On Monday 03 July 2006 20:35, Micah J. Cowan wrote:
> On Mon, Jul 03, 2006 at 06:43:30PM -0400, Patrick McFarland wrote:
> > On Monday 03 July 2006 18:21, Dennis Kaarsemaker wrote:
> > > On ma, 2006-07-03 at 18:02 -0400, Patrick McFarland wrote:
> > > > I'd like to see this added to the todo list as a required feature for
> > > > Edgy release, because it really is a sore spot in the Linux desktop
> > > > environment platform.
> > >
> > > Feel free to work on it, code says more than ranting.
> >
> > I've been trying to wrap my head around this one for awhile. My problem
> > is I know how to use iptables pretty proficiently. and using iptables
> > directly is always going to be an order of magnitude more powerful than
> > any UI tool... and also an order of magnitude or two more difficult to
> > use.
> >
> > So, basically, I haven't quite figured out how to yet.
>
> I believe that Windows Firewall is actually a very excellent model for
> a secure, user-friendly firewall interface. Pretty much everything is
> locked down by default, and when an attempt to connect to your machine
> that has not been explicitly authorized or blocked occurs, the system
> prompts you to authorize or deny the request/future such requests.

Thats not exactly the greatest solution, it teaches users to not read dialogs 
and just click yes.

-- 
Patrick McFarland || www.AdTerrasPerAspera.com
"Computer games don't affect kids; I mean if Pac-Man affected us as kids,
we'd all be running around in darkened rooms, munching magic pills and
listening to repetitive electronic music." -- Kristian Wilson, Nintendo,
Inc, 1989