158
Linux Firewalls: How to Actually Secure a Cloud Server (iptables, nftables, firewalld, ufw)
(blog.hofstede.it)
this post was submitted on 12 Jul 2026
158 points (98.2% liked)
Technology
86302 readers
2419 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
OpenSnitch is a nice for the desktop environment, deny by default and prompts the user when an application requests a open port, at first the prompts can get a little overwhelming given how many things want to connect to xyz server but eventually lightens up.
I really dont like the idea that a program on my local os doing things I don't want it to do and the only thing stopping it is a software firewall.
If you don't trust the platform then you shouldn't be using it. No bandaid like antivirus or firewall can help with that.
I mean, if you don’t have a firewall on the device itself then your router certainly does, your device requests xyz port open your router will oblige with UPNP unless explicitly denied.
The on-device firewall is just an extra step before it hits your router’s firewall anyways, I’m sure your devices have made contact with servers behind your back that you know nothing about.
I absolutely agree that additional security layers are useful and even necessary. A software firewall on the device itself just isn't one of them. For me.
Its a little annoying on Linux but I wonder what it would be like on Windows.
Windows firewall already does prompt like this
The firewall is annoying? I would argue and say the firewall is protecting your computer from connecting to a rouge server, annoying or not it’s better than some douche abusing an exploit in your system.
Trivial. It pops up, you click.
Glasswire and Tinywall(?) are like this.
Simplewall works great, it's open source. And yes, there are a couple of million requests made by windows apps alone, which are completely fine to block. Simplewall also blocks windows telemetry. I have to use win11 at work and it's an absolute ahitstorm of network requests that you don't get to see when using windows firewall.
Glaswire looks beautiful and functions well, but you will hit the paywall after a couple of weeks (I used this on the around 2010 I think)
Right, Simplewall, not Tinywall.