Flatsonar

Bouncer

by Justin Donnelly

Keep the riffraff out

Broad permissions Verified creator MPL-2.0 v50.2.0
Screenshot 1 of Bouncer Screenshot 2 of Bouncer Screenshot 3 of Bouncer

About

Bouncer is an application to help you choose the correct firewall zone for wireless connections. When you connect to a new network, a window opens prompting you for what kind of network (eg home, public, work) it is. When you choose the network type, it is associated with that network and automatically used in the future.

NetworkManager and firewalld are required. If you don't use those, you can't use Bouncer. Fedora uses both by default. Other distributions may not.

Additional setup is required after installation. See the applicable section for your distribution. Once the setup is done, start Bouncer and confirm your system is configured correctly. Then click the Monitor button to begin using Bouncer. After that, it will start automatically when you log in.

Fedora

  • For Fedora, everything just works! Just start Bouncer to confirm, and click the Monitor button to begin using Bouncer.

Ubuntu

  • Uninstall ufw: sudo apt remove ufw
  • Install firewalld: sudo apt install firewalld
  • By default, polkit is configured to not let regular users set the zone for a connection. The simplest way to change this is to add users to the netdev group (eg usermod -a -G netdev justin). Alternatively, you can create a custom polkit rule for the org.freedesktop.NetworkManager.settings.modify.system action (how to create custom polkit rules is beyond the scope of this document and is left as an exercise for the reader).
  • Start Bouncer and confirm your system is configured correctly. Then click the Monitor button to begin using Bouncer.

Debian

  • Install firewalld: sudo apt install firewalld
  • By default, polkit is configured to not let regular users set the zone for a connection. The simplest way to change this is to add users to the netdev group (eg usermod -a -G netdev justin). Alternatively, you can create a custom polkit rule for the org.freedesktop.NetworkManager.settings.modify.system action (how to create custom polkit rules is beyond the scope of this document and is left as an exercise for the reader).
  • Start Bouncer and confirm your system is configured correctly. Then click the Monitor button to begin using Bouncer.

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • network configuration
    --system-talk-name=org.freedesktop.NetworkManager
  • talks to system service org.fedoraproject.FirewallD1
    --system-talk-name=org.fedoraproject.FirewallD1
  • inter-process communication (needed for X11)
    --share=ipc
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • Wayland display
    --socket=wayland
  • GPU acceleration
    --device=dri

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.