Hi. I wanted to know if it’s needed to install a firewall on a linux desktop/laptop. Why yes or why no?
If your computer is connected to a network, I don’t see any downside of enabling a firewall. It’s a good security layer to have and costs basically no resources to keep running.
I guess a downside is having to fiddle with it, allowing stuff you want to get through. Sometimes it blocks stuff you don’t want blocked
I’d rather have to open up stuff my self then have an uninvited visitor doing it without me knowing about it.
There is no reason not having a firewall
Yes, and hopefully you will have one preinstalled, blocking all incoming connections.
An outbound firewall like Opensnitch or Portmaster is also nice. But here I would say often you dont need one. Balena Etcher was the only App loading Ads, at all. Firefox and Thunderbird can be hardened. The rest is okay and doesnt phone home, Flatpak permissions ard also great.
Linux comes with a default firewall it’s called IPtables/NFtables, Just make sure that it’s on. Example I Ubuntu Sudo ufw enable.
Why not? It’s comically easy to set up one.
If you allow the whole subnet you might as well not use a firewall. Your router has one and port forwarding is disabled by default.
It’s also comically useless to have a desktop firewall application installed when you’re already behind some sort of firewall solution like a router not forwarding most incoming traffic.
It depends. Sure, maybe somewhat redundant for a home desktop that just stays at home on a network you control, but for a laptop it is absolutely essential.
You may also want a firewall to defend against other devices within your local network. Let’s say you have IoT devices, many of which are poorly secured and maintained by their manufacturers, or you live with family members or guests who don’t practice or even know about proper computing hygiene and are bringing in devices onto your local WiFi.
My IoT devices already have a dedicated network and guest can use my guest WiFi. But yes, you’re right. It depends. And especially for mobile devices some sort of local firewall solution could be relevant. If there are no ports exposed to the LAN you’re pretty save, though.
