Comment 10 for bug 578404

Hi Marcos and Emilio,

Yes, I do have:
Versión Gufw: 10.04.4
Versión ufw: ufw 0.30pre1-0ubuntu2

Marcos, here I send you a new video of this bug along with its respective log with script enabled (after cleaning registry and reconfiguring Gufw), as per your request.

Otherwise, Emilio, concerning your question, I think it's safer to deny everything, then to open just the 3 or 4 ports and protocols you do need for surfing or mailing (and only outgoing, of course). This is also the opinion of Simon Edwards (the creator of Guarddog).

And a Linux firewall can be (still) safer, if on a per-application explicit permission basis (yes, like in Windows). This was the approach of Tuxguardian or linux-firewall.org among others.

In Linux normally we do trust on the software we install (through repositories), but as the number of Linux users increases, then not only more malware creators will turn their eyes to this operating system, but also more users will download applications from different websites or other untrusted sources.

Both reasons seem to advise the use of on a per-application basis firewall, also in Linux.

But, while somebody makes such per-application-basis firewall, the ability to deny also outgoing connections it's quite welcome.