UFW missing pre-configured HTTPS option

Bug #911383 reported by Lars Noodén
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Gufw
Fix Released
Low
Unassigned
gui-ufw (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

GUFW has an option in the pre-configured firewall rules. HTTPS (port 443 ) should be added to the choices, HTTP is already there.

Related branches

Revision history for this message
Lars Noodén (larsnooden) wrote :

$ lsb_release -rd
Description: Ubuntu precise (development branch)
Release: 12.04

$ apt-cache policy gufw
gufw:
  Installed: 11.10.2-0ubuntu2
  Candidate: 11.10.2-0ubuntu2
  Version table:
 *** 11.10.2-0ubuntu2 0
        500 http://fi.archive.ubuntu.com/ubuntu/ precise/universe i386 Packages
        100 /var/lib/dpkg/status

Revision history for this message
costales (costales) wrote :

Thanks Lars! :)
By GNOME guide the dropbox must have 10 items max.
I'm thinking in another solution for that dropbox :)
Best regards and happy new year :)

Changed in gui-ufw:
status: New → In Progress
Revision history for this message
Lars Noodén (larsnooden) wrote :

Is POP3 still widely used? I thought it was replaced by IMAP long ago. Or maybe HTTP and HTTPS could be combined into a single menu item.

Revision history for this message
costales (costales) wrote :

I use POP3 :P hehehe :)
Combined both could be a great idea :) Thanks! I will think on it!

Revision history for this message
Lars Noodén (larsnooden) wrote :

Ok. If you are not willing to part with POP3 in favor of IMAP yet ;) then what about swapping out FTP? We should be finding ways to discourage its use especially among beginners when there has been for a long time a secure replacement (SFTP).

Along those lines, the line saying SSH should probably say SSH/SFTP instead, just to make it clear to beginners, since they use the same port. Should that be in a separate bug report?

Revision history for this message
costales (costales) wrote :

:) No, it's OK in this bug too :)
We'll think on it! I think the both option (HTTP/HTTPS) is a great idea :)
Thanks Lars!!

Revision history for this message
Lars Noodén (larsnooden) wrote :

I'm not sure if this is making things too complicated, but one of the problems with SSH is that bots start to hammer it from the moment it is turned on. I use rate limiting and have seen others mention it on the Ubuntu Forums. Maybe it can be part of the settings for SFTP/SSH.

e.g.

   ip6tables -I INPUT -p TCP --dport 22 -m state --state NEW -m limit --limit 4/minute --limit-burst 5 -j ACCEPT
   iptables -I INPUT -p TCP --dport 22 -m state --state NEW -m limit --limit 4/minute --limit-burst 5 -j ACCEPT

Revision history for this message
costales (costales) wrote : Re: [Bug 911383] Re: UFW missing pre-configured HTTPS option

Yes, it's complicate now,because the code use the service name without
limits. In other way gufw must use the 'standard' command in the preconf
and the user can create anothers configurations :-) but we're thinking on
an intro/wizzard and could be good idea recommend use limit with ssh :-)
I must tell you that this issue will be solved for 13.04 ;-)
Cheers and thanks for the ideas!!! :-D
On Jan 5, 2012 9:17 PM, "Lars Noodén" <email address hidden> wrote:

> I'm not sure if this is making things too complicated, but one of the
> problems with SSH is that bots start to hammer it from the moment it is
> turned on. I use rate limiting and have seen others mention it on the
> Ubuntu Forums. Maybe it can be part of the settings for SFTP/SSH.
>
> e.g.
>
> ip6tables -I INPUT -p TCP --dport 22 -m state --state NEW -m limit
> --limit 4/minute --limit-burst 5 -j ACCEPT
> iptables -I INPUT -p TCP --dport 22 -m state --state NEW -m limit
> --limit 4/minute --limit-burst 5 -j ACCEPT
>
> --
> You received this bug notification because you are subscribed to gui-ufw
> in Ubuntu.
> https://bugs.launchpad.net/bugs/911383
>
> Title:
> UFW missing pre-configured HTTPS option
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/gui-ufw/+bug/911383/+subscriptions
>

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gui-ufw (Ubuntu):
status: New → Confirmed
costales (costales)
Changed in gui-ufw:
importance: Undecided → Low
Changed in gui-ufw (Ubuntu):
status: Confirmed → Invalid
Revision history for this message
Lars Noodén (larsnooden) wrote :

No HTTPS for GUFW for the time being?

Revision history for this message
costales (costales) wrote :

@Lars: Just changed the project from official repositories to Gufw project ;)
I'll fix for Ubuntu 12.10.
Best regards :)

costales (costales)
Changed in gui-ufw:
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gui-ufw - 12.10.0-0ubuntu1

---------------
gui-ufw (12.10.0-0ubuntu1) quantal; urgency=low

  * New upstream release (LP: #911383, #925793).
  * Update debian/copyright file.
  * Bump Standards-Version to 3.9.3.
 -- Devid Antonio Filoni <email address hidden> Sat, 09 Jun 2012 20:56:56 +0200

Changed in gui-ufw (Ubuntu):
status: Invalid → Fix Released
costales (costales)
Changed in gui-ufw:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.