0

So what would you make of that?

I take it you're suggesting a KDE app for managing the firewall? (I thought somewhere along the way there was one for ufw or something).
As for the poll answers, I could see going both, based on the VDG/KDE mantra of Simple by default, Powerful when needed. Certainly this is a place where it would be good for those familiar with configuring firewalls to get together with some designers to work out a good work flow.

ufw is simple. but - imho outdated (again).

what i miss as an ex - windows user on linux: applications like windows firewall control. means: interactive/real-time control over inbound/outbound connections. means: the internet connection is blocked by default. if a process tries to establish an inbound/outbound connection, this is shown to me in a pop-up panel and i have the free choice to allow or block this process (temporary or permanent). i also have a simple gui, which shows me the current firewall settings based on my decisions and allows me to make changes.

this would be more efficient and user friendly. the os can still be secure/privacy-friendly. but when it comes the web, almost every security/privacy ends. sometimes even with(in) the linux-os itself (for example: endless os or ubuntu store or new plans of ibm/redhat/fedora on v30).

pfsense whould be an alternative but nope. too cumbersome and i don't trust this company. kde has the "status and notifications" feature. what if - additionally - connections could be displayed and managed - as described above. much work, but worth it & unique in the linux - world.

wow, you're right linux people, not only iptables & ufw - docker - bug, firewalld or something bad like pfsense & co. are outdated & a mess, firewalls are per se a mess. i vote against me and hope for something completely new in a better future.

I will suggest rather KCM module as a wrapper to firewalld/iptables + KDE libraries to talk with firewalld/iptables.

1. App could asks by library to add new firewall rule (in case iptables, it must be reloaded) - of course, polkit must handle this
2. User could configure iptables/firewalld using KCM

Nah, I'd be against it as well: firewalls are alwyas messing with what I'm going in some way or another when I'm working, so I wouldn't really enjoy one more layer of firewall interfering in what I'm doing.
Or if you guys really want to include it, can you make it so it's easy to deactivate and reactivate without causing trouble to other functionalities.

*lol* the firewall, an integral part (yes, on linux too) in times like this, but one only hears "nah".

and the biggest joke of all was a retweet from kubuntu : of all people .. .. a microsoft.net guy, who makes fun of firewalls. well, that's funny. on three different levels. but also eye-opening about the state of affairs regarding ubuntu/kubuntu/microsoft.

and an even bigger joke: of all things in _gnome_ 3.32 (under silverblue 30 beta) you could find integrated firewall settings (advanced network button, 1st rider). there you could easily set firewalld zones for the respective network (home, block ... et cetera).

i only hope that the kde - security and privacy innovations announced on twitter offer real solutions, otherwise i'll be away from kde neon (imho more noble motifs, but a solitary approach is not possible as long as ubuntu is it's base) as soon as possible. privacy/securtiy features are primary "new features". everything else is secondary - imho.

Something like Gufw but allowing using other backend different from Ufw will be great. Easy to enable/disable and to configure. Integrated with NetworkManager GUI maybe?.

The choice of firewall software, and it's inclusion would be something done at the distro level, not the DE. A vote against having this integrated into a desktop environment is not a vote against firewalls themselves.