commands are:

iptables -I INPUT -p tcp --dport 3389 -j ACCEPT > to open only that tcp port

sudo ufw enable transmission > to open the whole program

being a newbie I’d say it’s safer to only open a determined port with iptables. What do you think?

  • Skull giver@popplesburger.hilciferous.nl
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    1 month ago

    You can also open a single port with UFW.

    Opening single ports is safer from a technical standpoint.

    From a practical standpoint, your personal laptop probably doesn’t need that much security. You’re probably already behind a firewall anyway, and you’re not openly reachable 24/7.

    I’d go as far as say that you probably don’t even need to turn on a firewall at Unless you don’t use a recently secure password, I guess, then you may need to firewall out SSH and RDP.

    There’s an advantage to the “block outgoing traffic from unknown applications” kind of firewall, but UFW does the opposite and iptables (or nftables in more recent distros) is a pain. If you want that, there are tools out there that can do that.

    Having an incoming firewall at all is pretty good for security, no need to make your life unnecessarily difficult with complex rules and conditions. Especially if all that security makes you turn off the firewall entirely every time you need to print or connect to a different WiFi access point.