On Sat, 2005-12-17 at 04:45 -0500, Sean wrote:
On Sat, December 17, 2005 3:53 am, Michael A. Peters said:
Users behind NAT isn't a Fedora problem. They need to port forward the BT ports - but that can go on something like fedorafaq.org (or whatever it is).
Well Fedora could help the situation by making sure its default bt client supports UPnP so that a compliant nat router (like most linksys) will automatically be configured without the user needing to deal with it at all.
I would NOT want that. I've got that turned off on my Linksys - I don't want any ports at all open for forwarding that I haven't specifically opened for forwarding.
Last thing I want is someone at my house running some program that opens up port forwarding on my router.
Firewall is a problem. A nice gui like firestarter (not necessarily firestarter, but something like it) for configuring the Fedora Firewall would be nice - with common app/port selections so users don't necessarily have to care what port ranges are used for what (unless they want to meddle with the defaults)
until I decided to go with Linksys for my router, firestarter is what I used for NAT - it has a really nice interface for controlling what ports are allowed in etc.
It would be nice if the user just had to answer a simple question like "Would you like to open the ports needed for BT in your firewall configuration?".
That has to be done as root, so it has to either be in Anaconda - or in a system-config tool. I personally vote for the latter, I think Anaconda is too complicated as it is. OS X (at least 10.1 - haven't installed anything later) has a sweet and simple installer. But anyway, that's just my opinion. Linus Torvalds will probably tear me a new one for wanting an installer targeted at dumb users ;)
The same problem exists when trying to configure many other network apps too. It would be great to have a general framework for apps to request open ports from the firewall and have the user just get a popup so that she can agree or cancel. Perhaps this could all be done over dbus? Does something like this already exist?
The problem with that is that root is required. I know some Windows firewalls do that - but only if you are running as admin.