Running Firestarter

[txHarleyMan]

Hello,

I just installed Firestarter. Is there any way to make it run automatically on login without requiring the root password? My wife and I have our seperate login's and I'm not about to giver her adm access! That is suicide.

Thank you.

[SheeEttin]

Re: Running Firestarter

If it's just for monitoring, I doubt it needs root privileges.
But, if it does, the best thing I could think of would be to create a simple script in ~/.kde/Autostart, basically consisting of

#!/bin/bash
kdesu /usr/bin/firestarter

assuming that's where the executable is. Since this would prompt for a password (and without an attached terminal, one can't be entered), you'll need to modify /etc/sudoers (read sudoers(5) first) to allow execution of /usr/bin/firestarter by the specified user(s) without a password.

You could also create a script and make it suid root (and writable only by root), though that might cause some sort of problems...

[Rog131]

Re: Running Firestarter

Here is same story (as told by SheeEttin):

Frequently asked questions
http://www.fs-security.com/docs/faq.php

This chapter contains answers to commonly asked questions, as well as various tips and tricks for Firestarter.

Questions:

* How can I get Firestarter to load automatically when I log in as a regular user?
* How do you specify a range of IPs or use wildcards in the rules?
* Do I have to start Firestarter after I have rebooted?
* How can I test if the firewall is working for sure?

Note
Firestarter is a graphical tool for editing iptables. With Firestarter you can open and close ports easily. There is no need to keep Firestarter to run all the times.

There is also Guarddog - firewall configuration utility for KDE.


Links:
Firestarter vs. iptables
http://ubuntuforums.org/showthread.php?t=24232

IptablesHowTo
https://help.ubuntu.com/community/IptablesHowTo

HOWTO: Set a custom firewall (iptables) and Tips
http://ubuntuforums.org/showthread.php?t=159661

[txHarleyMan]

Re: Running Firestarter

Thank you.

Sudoers did not like this syntax:

mike ALL= NOPASSWD: /usr/sbin/firestarter
kim ALL= NOPASSWD: /usr/sbin/firestarter

[Rog131]

Re: Running Firestarter

Sudoers did not like this syntax:

In what way ? Error message ?

If something like this:

(firestarter:8362): Gtk-WARNING **: cannot open display:

The output of "echo $DISPLAY" is:
:0.0

The output of "sudo firestarter --display :0.0" is:
Xlib: connection to ":0.0" refused by server
Xlib: No protocol specified

(firestarter:9174): Gtk-WARNING **: cannot open display: :0.0

then

Doesn't launch and gives gtk "can't open display"
https://bugs.launchpad.net/ubuntu/+s...ter/+bug/30291

or

How-To Start Firestarter GUI w/o password
http://ubuntuforums.org/showthread.php?t=177738

[txHarleyMan]

Re: Running Firestarter

First it doesn't load on startup from following the first set of instruction. When I try to open root terminal, I just get a spinning hour glass. When I try to edit Sudoers again, I get a syntax error on line 25 which is where I added the 2 lines I mentioned. So I boot to the command prompt in recovery mode, edit sudoers with visudo -f /etc/sudoers in order to be able to edit it and restore the previous state of my machine.

Odd.

[Snowhog]

Re: Running Firestarter

Didn't see this link identified. You may want to check through the section on Firestarter that this post takes you to:
http://ubuntuguide.org/wiki/Ubuntu_Feisty#Firewall

[txHarleyMan]

Re: Running Firestarter

That did the trick! Thank you.

This was the link I was using at first ( kde )

http://www.fs-security.com/docs/faq.php

[kubicle]

Re: Running Firestarter

My wife and I have our seperate login's and I'm not about to giver her adm access! That is suicide.

Then you probably don't want to give her access to your firewall settings by starting the firestarter GUI configurator for her either

as rog131 pointed out, you don't have to start the GUI (and the notification tray icon) for the firewall to work. (You can of course start it for your own account if you need to change your firewall settings often...or if you like the flashing icon :P)

[txHarleyMan]

Re: Running Firestarter

Thats a good point. I like having it in My tray just to see whats going on.
Thank you!