Author Topic: Firewall & Anti virus program for Linux  (Read 5500 times)

Offline ungleneagles

  • Newbie
  • *
  • Posts: 3
Firewall & Anti virus program for Linux
« on: December 11, 2011, 10:31:28 AM »
Has Comodo ever considered a firewall & Anti virus program for Linux.
I Know Linux is rarely bothered by such things but as it becomes more popular the threat is increasing.

Offline JoWa

  • Product Translator
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 3781
Re: Firewall & Anti virus program for Linux
« Reply #1 on: December 11, 2011, 11:35:14 AM »
CAV for Linux is coming soon. :)
https://forums.comodo.com/CAV-t77305.0.html;msg553346#msg553346

I have not heard of any plans for a firewall, though.
Ubuntu 14.04.1, 64-bit | Chrome 38β | HTTPS Everywhere
Forum Policy | Comodo Product Help

Offline Valentin N

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 2867
  • Usability Study Group
    • My homepage at the moment
Re: Firewall & Anti virus program for Linux
« Reply #2 on: December 11, 2011, 04:54:41 PM »
CAV for Linux is coming soon. :)
https://forums.comodo.com/CAV-t77305.0.html;msg553346#msg553346

I have not heard of any plans for a firewall, though.

They should make a complete version (maybe without d+) since Linux doesn't have that good firewall.
Skype: comodohelper (Personal)

CEVPN: Valentin N

CIS 6.3

Keep CTM alive by voting


Offline goodolandy

  • Newbie
  • *
  • Posts: 10
Re: Firewall & Anti virus program for Linux
« Reply #3 on: December 19, 2011, 03:41:40 PM »
I agree that a full suite consisting of Comodo Firewall and Antivirus should be available on Linux.  We may not have much to worry about now but as Linux keeps gaining users, it's only a matter of time until infection writers start targeting the Linux desktop.  I would rather be protected now than wait until after attacks start.

I would also like to see the Comodo Dragon browser on Linux.

Offline disPPlay

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 843
  • WE <3 COMODO
Re: Firewall & Anti virus program for Linux
« Reply #4 on: December 26, 2011, 08:04:42 PM »
They should make a complete version (maybe without d+) since Linux doesn't have that good firewall.

Linux dosen't have a good firewall? what about IpTables.

Offline Valentin N

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 2867
  • Usability Study Group
    • My homepage at the moment
Re: Firewall & Anti virus program for Linux
« Reply #5 on: December 27, 2011, 02:53:39 PM »
Linux dosen't have a good firewall? what about IpTables.


I don't know about IpTable.
Skype: comodohelper (Personal)

CEVPN: Valentin N

CIS 6.3

Keep CTM alive by voting


Offline Boris 3

  • Comodo's Hero
  • *****
  • Posts: 1347
Re: Firewall & Anti virus program for Linux
« Reply #6 on: December 27, 2011, 06:18:37 PM »
Linux dosen't have a good firewall? what about IpTables.

To my knowledge IpTables doesn't allow to make rules by application only by ports and protocols.
No graphical interface's firewall application allows to make rules for outbound connections, only inbound ones.
If you want to make outbound rules you have to do them through the command line which isn't quite user-friendly.

As for a HIPS, you don't have the equivalent of Defense+. Moreover Selinus, AppArmor or Tomoyo aren't easy to configure or use.

Offline EricJH

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 19208
Re: Firewall & Anti virus program for Linux
« Reply #7 on: December 27, 2011, 09:25:33 PM »
To my knowledge IpTables doesn't allow to make rules by application only by ports and protocols.
No graphical interface's firewall application allows to make rules for outbound connections, only inbound ones.
If you want to make outbound rules you have to do them through the command line which isn't quite user-friendly.

As for a HIPS, you don't have the equivalent of Defense+. Moreover Selinus, AppArmor or Tomoyo aren't easy to configure or use.
That's what I still think about deep down inside about Linux. The command prompt is never far away.... ;)  !ot!

Offline Radaghast

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 4068
Re: Firewall & Anti virus program for Linux
« Reply #8 on: December 27, 2011, 10:22:45 PM »
Iptables are extremely powerful and can be used to do much more than virtually all Windows firewalls, There are also numerous GUI-frontends to make configuration easy for those unfamiliar with the command line. To get started with iptables head over to the netfilter

Here's a few front-ends and an Application firewall, there are others.

Gufw
Firestarter
Leopard Flower
Firewall Builder
Turtle Firewall Project

I think it's also worth pointing out the fundamental differences between Windows and linux, at least when considering controls for network application traffic. With Windows, software can and does come form many sources, not all of which may be considered completely trustworthy. There's also an inherent paranoia found in Windows users that the software they use, may be/is spying on them.

With linux, the majority of software one tends to install, originates in secure, verified repositories and those choosing to install from these locations, for the most part, consider the software trustworthy. There's also a significantly different security architecture between the two operating systems, which again, for the most part, makes Windows inherently less secure and thus require more controls.


“Don’t worry if it doesn’t work right. If everything did, you’d be out of a job.”

Offline Boris 3

  • Comodo's Hero
  • *****
  • Posts: 1347
Re: Firewall & Anti virus program for Linux
« Reply #9 on: December 28, 2011, 03:44:59 AM »
There are also numerous GUI-frontends to make configuration easy for those unfamiliar with the command line.

Can you make outbound rules and/or applications rules with them just like with CFW?

With linux, the majority of software one tends to install, originates in secure, verified repositories and those choosing to install from these locations, for the most part, consider the software trustworthy. There's also a significantly different security architecture between the two operating systems, which again, for the most part, makes Windows inherently less secure and thus require more controls.

Are the browsers immune to attacks in linux?  The inherent security of linux may protect the kernel and users from each others, but what about the personal data and credentials of one particular user if his browser is hijacked?

Offline Radaghast

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 4068
Re: Firewall & Anti virus program for Linux
« Reply #10 on: December 28, 2011, 04:49:18 AM »
Can you make outbound rules and/or applications rules with them just like with CFW?

Indeed.

Quote
Are the browsers immune to attacks in linux?  The inherent security of linux may protect the kernel and users from each others, but what about the personal data and credentials of one particular user if his browser is hijacked?

At a simple level, consider if there are any differences between a rule set you might create for a linux flavoured CIS and compare that with an equivalent created for iptables. Basically, with both, you'd allow traffic out to ports 80 and 443 and allow stateful traffic inbound. If your system were to be compromised and the exploit wanted to make a connection, via the browser, on one of these standard ports, it would be allowed. Remember, we're talking vanilla firewalls here, not HIPS or behaviour blockers.

Of course no operating system is immune and there have been more and more attacks against linux and Macs. Likewise, browser exploits do exist, especially when one adds things like flash or Java into the equation. However, a lot of the exploits typically require privilege escalation to do anything malicious and that's much easier to achieve on Windows. Of course, disabling these points of weakness and using something like NoScript makes things very much more difficult.

« Last Edit: December 28, 2011, 05:11:28 AM by Radaghast »
“Don’t worry if it doesn’t work right. If everything did, you’d be out of a job.”

 

Seo4Smf 2.0 © SmfMod.Com | Smf Destek