Re: trusted apps and trusted networks

2015-01-13 Thread Björn Persson
Kevin Kofler wrote: >I am user C. I don't need a log of blocked stuff, I'd only be worried >about intruders DoSing the machine by filling the log. I really want >ANY outside access to my machine silently dropped. My machine is NOT a >server, period. So you never use Bittorrent to download a new Fe

Re: trusted apps and trusted networks (was: 5tFTW: Fedora 21, 22, and 19, firewall discussion, and holiday break)

2015-01-12 Thread Kevin Kofler
Stephen Gallagher wrote: > I doubt that User C *as described* exists. I suspect you meant "User C > does not want an interactive notification. They want things to be > blocked and logged appropriately, so that if things are not behaving as > expected, they can find out why and what they would need

Re: trusted apps and trusted networks (was: 5tFTW: Fedora 21, 22, and 19, firewall discussion, and holiday break)

2015-01-05 Thread Stephen Gallagher
On Mon, 2014-12-22 at 23:24 +0100, Kevin Kofler wrote: > Stephen John Smoogen wrote: > > User A wants to be notified of all programs opening ports even if he is > > going to whitelist them. > > User B does not want to be notified and could care less about security. > > etc. > > User C does not

Re: trusted apps and trusted networks (was: 5tFTW: Fedora 21, 22, and 19, firewall discussion, and holiday break)

2014-12-22 Thread Kevin Kofler
Stephen John Smoogen wrote: > User A wants to be notified of all programs opening ports even if he is > going to whitelist them. > User B does not want to be notified and could care less about security. > etc. User C does not want to be notified either, but just wants everything blocked silently.

Re: trusted apps and trusted networks (was: 5tFTW: Fedora 21, 22, and 19, firewall discussion, and holiday break)

2014-12-21 Thread Stephen John Smoogen
On 21 December 2014 at 09:45, Björn Persson wrote: > Mattia Verga wrote: > >Since I'm not good to write complex sentences in English, here is a > >schema that explains how I think firewalld should work as I wrote in > >the previous post. > > A "trusted app" to me would mean that I trust that it's

trusted apps and trusted networks (was: 5tFTW: Fedora 21, 22, and 19, firewall discussion, and holiday break)

2014-12-21 Thread Björn Persson
Mattia Verga wrote: >Since I'm not good to write complex sentences in English, here is a >schema that explains how I think firewalld should work as I wrote in >the previous post. A "trusted app" to me would mean that I trust that it's secure enough to communicate even on *untrusted* networks. I d